open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(0xffffffffffffffff, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(0xffffffffffffffff, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(0xffffffffffffffff, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) [ 289.505320] device eql entered promiscuous mode 2018/02/10 11:25:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc), &(0x7f0000188000-0x4)=0xc) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(0xffffffffffffffff, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(0xffffffffffffffff, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) [ 289.599145] device eql entered promiscuous mode 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(0xffffffffffffffff, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, 0xffffffffffffffff) 2018/02/10 11:25:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, 0xffffffffffffffff) [ 289.722072] device eql entered promiscuous mode 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 2018/02/10 11:25:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, 0xffffffffffffffff) 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x8, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) [ 289.840219] device eql entered promiscuous mode 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) rmdir(&(0x7f0000d6e000)='./control\x00') 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) 2018/02/10 11:25:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x200) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) [ 289.922124] sg_write: 59 callbacks suppressed [ 289.922134] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 289.922134] program syz-executor4 not setting count and/or reply_len properly [ 289.922641] device eql entered promiscuous mode 2018/02/10 11:25:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgctl$IPC_RMID(0x0, 0x0) [ 290.016980] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 290.016980] program syz-executor4 not setting count and/or reply_len properly [ 290.050723] device eql entered promiscuous mode 2018/02/10 11:25:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) 2018/02/10 11:25:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) [ 290.439251] device eql entered promiscuous mode [ 290.446852] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 290.446852] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 11:25:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget$private(0x0, 0x400) 2018/02/10 11:25:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) 2018/02/10 11:25:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) r3 = syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x46b3, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget$private(0x0, 0x400) [ 290.970331] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 290.970331] program syz-executor4 not setting count and/or reply_len properly [ 290.998640] device eql entered promiscuous mode 2018/02/10 11:25:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 291.061085] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 291.061085] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 11:25:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(0xffffffffffffffff, r0) 2018/02/10 11:25:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) msgget$private(0x0, 0x400) 2018/02/10 11:25:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 11:25:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) 2018/02/10 11:25:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(0xffffffffffffffff, r0) 2018/02/10 11:25:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) 2018/02/10 11:25:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:11 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(0xffffffffffffffff, r0) [ 291.548687] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 291.548687] program syz-executor4 not setting count and/or reply_len properly [ 291.585236] device eql entered promiscuous mode 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0xa6bf, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) 2018/02/10 11:25:12 executing program 0: pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 291.680540] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 291.680540] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 0: pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x6, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) [ 291.781710] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 291.781710] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x100, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) msgget$private(0x0, 0x400) [ 291.889508] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 291.889508] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc), &(0x7f0000188000-0x4)=0xc) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 291.990920] sg_write: data in/out 2012/24 bytes for SCSI command 0x0-- guessing data in; [ 291.990920] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc), &(0x7f0000188000-0x4)=0xc) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 2018/02/10 11:25:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) msgget(0x0, 0x400) 2018/02/10 11:25:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgget$private(0x0, 0x400) 2018/02/10 11:25:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 2018/02/10 11:25:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgget$private(0x0, 0x400) 2018/02/10 11:25:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) msgget(0x0, 0x400) 2018/02/10 11:25:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/10 11:25:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) 2018/02/10 11:25:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgget$private(0x0, 0x400) 2018/02/10 11:25:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/10 11:25:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) 2018/02/10 11:25:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f0000720000-0xa)='./control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/10 11:25:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgget(0x0, 0x400) 2018/02/10 11:25:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x0, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) 2018/02/10 11:25:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgget(0x0, 0x400) 2018/02/10 11:25:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x0, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x0, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc), &(0x7f0000188000-0x4)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x480, 0x0) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) 2018/02/10 11:25:14 executing program 6: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x0, 0x0) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) 2018/02/10 11:25:14 executing program 6: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x0, 0x0) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) 2018/02/10 11:25:14 executing program 6: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f000044c000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f000044c000-0x18)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f000044f000)={0x80f, 0x7fffffff}) r2 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00002bd000), 0xfffffffffffffcf2) write$tun(r2, &(0x7f0000469000)=@hdr={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) epoll_pwait(0xffffffffffffffff, &(0x7f0000ee8000-0x30)=[], 0x0, 0x0, &(0x7f0000ee9000), 0x8) syz_open_dev$midi(&(0x7f0000221000)='/dev/midi#\x00', 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000020000-0x9)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x9}, 0x1}, 0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000044e000)={0x7, r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000801000)='/dev/rfkill\x00', 0x0, 0x0) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) msgget$private(0x0, 0x400) msgget(0x2, 0x40) msgget(0x3, 0x90) msgctl$IPC_RMID(0x0, 0x0) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) msgget(0x2, 0x2) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) 2018/02/10 11:25:14 executing program 5: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 5: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) sched_setaffinity(0x0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r4, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r5 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r3, 0xb) pwritev(r5, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 5: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r2 = semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) sched_setaffinity(0x0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) r1 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a41000-0xc), &(0x7f000040b000)=0xc) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) sched_setaffinity(0x0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[], 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[], 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) r4 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) pwritev(r4, &(0x7f00006f6000)=[{&(0x7f0000efc000)="c0", 0x1}], 0x1, 0x0) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[], 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VT_SETMODE(r0, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VT_SETMODE(r0, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VT_SETMODE(r0, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) r1 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc), &(0x7f0000188000-0x4)=0xc) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) accept4$ax25(r1, &(0x7f000030a000-0x10), &(0x7f0000a25000-0x1)=0x10, 0x80800) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r3, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc), &(0x7f0000188000-0x4)=0xc) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r2, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 1: r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x0, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r0, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r0, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 1: r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x0, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r1, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 1: r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r0, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r1, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x0, &(0x7f0000b00000-0x8)=0x7) dup2(r0, r2) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x0, 0x400) 2018/02/10 11:25:15 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x400) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)) dup2(r0, r2) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x400) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:15 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x400) 2018/02/10 11:25:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)) dup2(r0, r2) 2018/02/10 11:25:15 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000657000)=""/49, &(0x7f0000687000-0x4)=0x31) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)) dup2(r0, r2) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x0) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) r1 = syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000407000-0x4)=0x3, 0x4) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(0xffffffffffffffff, r2) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) semget$private(0x0, 0x3, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x205) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(0xffffffffffffffff, r2) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) syz_open_dev$vcsn(&(0x7f00004cb000)='/dev/vcs#\x00', 0x9, 0x40) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(0xffffffffffffffff, r2) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) syz_open_dev$loop(&(0x7f000019c000)='/dev/loop#\x00', 0x20000004, 0x200102) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 2018/02/10 11:25:16 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, 0xffffffffffffffff) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, 0xffffffffffffffff) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00007d6000)={[0xd000, 0xd000, 0x101000], 0x5, 0x1, 0x7f}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 2018/02/10 11:25:16 executing program 6: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000054f000-0xb)='/dev/mixer\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 6: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r0, 0xffffffffffffffff) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 6: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000ce6000)) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x2, 0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x3, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:16 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(0x0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(0x0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xce8000)=nil, 0xce8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x0, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(0x0, 0xfffffffffffffef1, &(0x7f0000c0e000)=0x66) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x0, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x0, 0x1, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000aaf000-0xc)={0x0}, &(0x7f0000188000-0x4)=0xc) sched_setaffinity(r0, 0xfffffffffffffef1, &(0x7f0000c0e000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x100000001, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x8, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x104, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x80000001, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r0, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r0, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x5, 0x6]) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x6]) 2018/02/10 11:25:17 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r0, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) 2018/02/10 11:25:17 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) 2018/02/10 11:25:17 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x6]) 2018/02/10 11:25:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff, 0x6]) 2018/02/10 11:25:18 executing program 3: mlockall(0x2) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 3: mlockall(0x0) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000118000-0x12)=[0x0, 0x7fffffff]) 2018/02/10 11:25:18 executing program 3: mlockall(0x0) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 3: mlockall(0x0) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 6: r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 6: r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 6: r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 4: mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 4: mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 4: mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r0, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x0, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x0, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r0, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x0, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, r0, 0x0) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r0, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r1, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, r0, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[], 0x0, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[], 0x0, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) 2018/02/10 11:25:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:18 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[], 0x0, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x1, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x0, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x0, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x25}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3af}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x0, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(0xffffffffffffffff, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(0xffffffffffffffff, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(0xffffffffffffffff, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x0, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x0, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[], 0x0, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x0, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[], 0x0, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[], 0x0, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x0, &(0x7f0000002000)) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x0, &(0x7f0000002000)) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x0, &(0x7f0000002000)) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001000-0x8)=0xffffffffffffff11, 0x8) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8), 0x8) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{0xffffffffffffffff, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8), 0x8) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001000-0x8), 0x8) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000), 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000), 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000), 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(0xffffffffffffffff, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(0xffffffffffffffff, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(0xffffffffffffffff, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0xffffffffffffffff, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0xffffffffffffffff, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0xffffffffffffffff, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00003b9000)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f00000b7000)='/dev/sg#\x00', 0x0, 0x200000) 2018/02/10 11:25:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:20 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3b, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, "0000000000040002004a5d513ebe6eceeb"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x2a, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x2a, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x2a, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x0) 2018/02/10 11:25:21 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x33, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x11, 0x0, "000000000004000200"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x0) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x33, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x11, 0x0, "000000000004000200"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 2: futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x33, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x11, 0x0, "000000000004000200"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x37, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x15, 0x0, "0000000000040002004a5d513e"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 2: futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x0) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x37, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x15, 0x0, "0000000000040002004a5d513e"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 2: futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(0xffffffffffffffff, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x37, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x15, 0x0, "0000000000040002004a5d513e"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x39, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x17, 0x0, "0000000000040002004a5d513ebe6e"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(0xffffffffffffffff, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x39, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x17, 0x0, "0000000000040002004a5d513ebe6e"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(0xffffffffffffffff, &(0x7f0000814000-0x30)=[{{0x77359400}}, {}], 0x30) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x39, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x17, 0x0, "0000000000040002004a5d513ebe6e"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{}], 0x18) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3a, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x18, 0x0, "0000000000040002004a5d513ebe6ece"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{}], 0x18) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3a, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x18, 0x0, "0000000000040002004a5d513ebe6ece"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{}], 0x18) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f85000)=0x1, 0xd9a4e94f68219be5) bind$inet(r0, &(0x7f000021d000)={0x2, 0x1, @empty}, 0x3e) syz_emit_ethernet(0x3a, &(0x7f0000ae0000-0x72)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x18, 0x0, "0000000000040002004a5d513ebe6ece"}}}}}, 0x0) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}], 0x18) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}], 0x18) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000057e000-0x9)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r0, &(0x7f0000814000-0x30)=[{{0x77359400}}], 0x18) clone(0x0, &(0x7f000080b000-0x1), &(0x7f0000dbe000), &(0x7f0000785000), &(0x7f000071c000)) 2018/02/10 11:25:21 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000776000)=[{r1, 0x40}], 0x1, 0xffffffffeffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00006e4000-0x4)=0x800000000000c) ioctl$TCFLSH(r2, 0x540b, 0x0) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x0, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/02/10 11:25:22 executing program 0: bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x0, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x0, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x0) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x0) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x6, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x0) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(0xffffffffffffffff, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(0xffffffffffffffff, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x411, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(0xffffffffffffffff, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf6462e", 0x18, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000), 0x0, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(0xffffffffffffffff, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000), 0x0, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(0xffffffffffffffff, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000), 0x0, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000), 0x8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(0xffffffffffffffff, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000), 0x8) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[], 0x0) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffec", 0xc, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffec", 0xc, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[], 0x0) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000), 0x8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffec", 0xc, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[], 0x0) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc00000900", 0x12, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c13000)={r0}, 0x8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)}], 0x1) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc00000900", 0x12, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00'}) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)}], 0x1) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc00000900", 0x12, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c13000)={r0}, 0x8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00'}) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880b", 0x15, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)}], 0x1) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c13000)={r0}, 0x8) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e89000000", 0x2c}], 0x1) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00'}) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880b", 0x15, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880b", 0x15, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e89000000", 0x2c}], 0x1) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf646", 0x17, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x17fffffff}, &(0x7f0000e5e000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf646", 0x17, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e89000000", 0x2c}], 0x1) 2018/02/10 11:25:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e00", 0x42}], 0x1) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000da7000)="36010100000040671901ffecfffc000009001e880bf646", 0x17, 0x0, &(0x7f0000f06000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e00", 0x42}], 0x1) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x0, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e00", 0x42}], 0x1) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x0, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f1000010007", 0x4d}], 0x1) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x0, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f1000010007", 0x4d}], 0x1) 2018/02/10 11:25:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f1000010007", 0x4d}], 0x1) 2018/02/10 11:25:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000", 0x53}], 0x1) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000", 0x53}], 0x1) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000", 0x53}], 0x1) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f", 0x56}], 0x1) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f", 0x56}], 0x1) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x0, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f", 0x56}], 0x1) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x0, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x0, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f53", 0x57}], 0x1) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[], 0x0) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f53", 0x57}], 0x1) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000), 0x0) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[], 0x0) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f53", 0x57}], 0x1) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000), 0x0) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c47000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpgrp(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000c45000-0x38)) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c13000)={r1}, 0x8) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[], 0x0) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000), 0x0) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)}], 0x1) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9f", 0x6c) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000), 0x8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)}], 0x1) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000), 0x8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) write$sndseq(0xffffffffffffffff, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9f", 0x6c) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)}], 0x1) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c13000), 0x8) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9f", 0x6c) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) write$sndseq(0xffffffffffffffff, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e89000000", 0x2c}], 0x1) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2", 0xa2) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) write$sndseq(0xffffffffffffffff, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffe03, 0x0, 0x1000000000000}) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 3: r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e89000000", 0x2c}], 0x1) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffe03, 0x0, 0x1000000000000}) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2", 0xa2) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e89000000", 0x2c}], 0x1) 2018/02/10 11:25:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:24 executing program 3: r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2", 0xa2) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:24 executing program 3: r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffe03, 0x0, 0x1000000000000}) 2018/02/10 11:25:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:24 executing program 2: r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e9", 0xbd) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffe03, 0x0, 0x1000000000000}) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 2: r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e00", 0x42}], 0x1) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffe03, 0x0, 0x1000000000000}) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 2: r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e9", 0xbd) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e00", 0x42}], 0x1) 2018/02/10 11:25:25 executing program 0: clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffe03, 0x0, 0x1000000000000}) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map}) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e00", 0x42}], 0x1) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e9", 0xbd) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 0: clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0x0, 0x0, 0x1000000000000}) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163", 0xcb) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 0: clock_adjtime(0x0, &(0x7f0000001000-0xd0)) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f1000010007", 0x4d}], 0x1) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163", 0xcb) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map}) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f1000010007", 0x4d}], 0x1) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163", 0xcb) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) [ 304.898677] audit: type=1400 audit(1518261925.286:30): avc: denied { map } for pid=29000 comm="syz-executor0" path="/dev/binder0" dev="devtmpfs" ino=9101 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 304.960134] audit: type=1400 audit(1518261925.344:31): avc: denied { set_context_mgr } for pid=29000 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 304.987982] audit: type=1400 audit(1518261925.372:32): avc: denied { call } for pid=29000 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 304.995908] binder_alloc: 29000: binder_alloc_buf size 65544 failed, no address space [ 305.018511] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 305.027208] binder: 29000:29001 transaction failed 29201/-28, size 0-8 line 2957 [ 305.038531] binder_alloc: binder_alloc_mmap_handler: 29000 20000000-20002000 already mapped failed -16 [ 305.049339] binder: BINDER_SET_CONTEXT_MGR already set [ 305.054716] binder: 29000:29001 ioctl 40046207 0 returned -16 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f", 0xd2) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f1000010007", 0x4d}], 0x1) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map}) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000013000-0x20)={0xffffffffffffffff, &(0x7f0000015000), &(0x7f000000e000)}, 0x378) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f", 0xd2) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) [ 305.054746] binder_alloc: 29000: binder_alloc_buf, no vma [ 305.066227] binder: 29000:29010 transaction failed 29189/-3, size 0-0 line 2957 [ 305.079333] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.091735] binder: release 29000:29001 transaction 2 out, still active [ 305.098667] binder: undelivered TRANSACTION_COMPLETE [ 305.103847] binder: send failed reply for transaction 2, target dead 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f", 0xd2) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000", 0x53}], 0x1) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7", 0xd5) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) [ 305.132669] binder_alloc: 29023: binder_alloc_buf size 65544 failed, no address space [ 305.140754] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 305.149481] binder: 29023:29036 transaction failed 29201/-28, size 0-8 line 2957 [ 305.167130] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.216861] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.219334] binder_alloc: 29047: binder_alloc_buf size 65544 failed, no address space [ 305.222670] binder: release 29023:29036 transaction 6 out, still active [ 305.230395] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 305.230421] binder: 29047:29052 transaction failed 29201/-28, size 0-8 line 2957 [ 305.253478] binder: undelivered TRANSACTION_COMPLETE [ 305.258641] binder: send failed reply for transaction 6, target dead 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000908000)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000ab5000-0x72)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7", 0xd5) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000", 0x53}], 0x1) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) [ 305.273607] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.279307] binder: release 29047:29052 transaction 9 out, still active [ 305.286121] binder: undelivered TRANSACTION_COMPLETE [ 305.291237] binder: send failed reply for transaction 9, target dead 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7", 0xd5) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) [ 305.338455] binder_alloc: 29065: binder_alloc_buf size 65544 failed, no address space [ 305.346570] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 305.355289] binder: 29065:29070 transaction failed 29201/-28, size 0-8 line 2957 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000883000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f0000832000)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfb", 0xd7) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000", 0x53}], 0x1) [ 305.384840] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.397826] binder: release 29065:29070 transaction 12 out, still active [ 305.404798] binder: undelivered TRANSACTION_COMPLETE [ 305.409954] binder: send failed reply for transaction 12, target dead [ 305.448343] binder_alloc: 29089: binder_alloc_buf size 65544 failed, no address space [ 305.456389] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 305.465124] binder: 29089:29091 transaction failed 29201/-28, size 0-8 line 2957 [ 305.487336] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfb", 0xd7) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f", 0x56}], 0x1) 2018/02/10 11:25:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfb", 0xd7) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) [ 305.492868] binder: release 29089:29091 transaction 15 out, still active [ 305.499744] binder: undelivered TRANSACTION_COMPLETE [ 305.504884] binder: send failed reply for transaction 15, target dead [ 305.519197] binder_alloc: 29108: binder_alloc_buf, no vma [ 305.524878] binder: 29108:29111 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(0xffffffffffffffff, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) [ 305.560458] binder_alloc: 29108: binder_alloc_buf, no vma [ 305.566135] binder: 29108:29119 transaction failed 29189/-3, size 0-8 line 2957 [ 305.598196] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f", 0x56}], 0x1) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(0xffffffffffffffff, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(0xffffffffffffffff, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f", 0x56}], 0x1) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) [ 305.613131] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.645978] binder_alloc: 29139: binder_alloc_buf, no vma [ 305.651665] binder: 29139:29149 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x0, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f53", 0x57}], 0x1) [ 305.692557] binder_alloc: 29139: binder_alloc_buf, no vma [ 305.698363] binder: 29139:29149 transaction failed 29189/-3, size 0-8 line 2957 [ 305.728961] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.734554] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(0xffffffffffffffff, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x0, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) [ 305.761622] binder_alloc: 29169: binder_alloc_buf, no vma [ 305.767276] binder: 29169:29176 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x0, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f53", 0x57}], 0x1) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) [ 305.804948] binder_alloc: 29169: binder_alloc_buf, no vma [ 305.810772] binder: 29169:29176 transaction failed 29189/-3, size 0-8 line 2957 [ 305.843890] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.849752] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:26 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(0xffffffffffffffff, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x0, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f000041c000-0x38)={&(0x7f0000100000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00007aa000-0x80)=[], 0x0, &(0x7f0000276000-0x83)=""/131, 0x83}, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f53", 0x57}], 0x1) [ 305.886240] binder: release 29203:29207 transaction 27 out, still active [ 305.893201] binder: undelivered TRANSACTION_COMPLETE [ 305.898371] binder: send failed reply for transaction 27, target dead 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(0xffffffffffffffff, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x0, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[], 0x0) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x0, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcbca", 0xd8) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = memfd_create(&(0x7f000021d000-0x2)='}\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) io_setup(0x8, &(0x7f0000002000)) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) [ 305.972595] binder: release 29227:29232 transaction 29 out, still active [ 305.979564] binder: undelivered TRANSACTION_COMPLETE [ 305.984724] binder: send failed reply for transaction 29, target dead [ 306.046462] binder_alloc: 29245: binder_alloc_buf size 65544 failed, no address space [ 306.054556] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 306.063293] binder: 29245:29258 transaction failed 29201/-28, size 0-8 line 2957 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124), 0x0) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[], 0x0) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124), 0x0) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[], 0x0) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124), 0x0) [ 306.086590] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.106180] binder_alloc: 29266: binder_alloc_buf size 65544 failed, no address space [ 306.114237] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 306.122975] binder: 29266:29270 transaction failed 29201/-28, size 0-8 line 2957 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) [ 306.189128] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.223311] binder_alloc: 29301: binder_alloc_buf size 65544 failed, no address space 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9f", 0x6c) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) [ 306.231392] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 306.240139] binder: 29301:29303 transaction failed 29201/-28, size 0-8 line 2957 [ 306.263507] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9f", 0x6c) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) [ 306.284124] binder: 29319:29320 transaction failed 29189/-22, size 0-0 line 2842 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9f", 0x6c) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x0, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) [ 306.314913] binder: 29319:29327 transaction failed 29189/-22, size 0-8 line 2842 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10), 0x10) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e9", 0xa2) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r0, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10), 0x10) [ 306.364225] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.382488] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e9", 0xa2) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10), 0x10) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x0, &(0x7f0000000000)="c8d63f23", 0x4) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r0, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r0}, 0x10) 2018/02/10 11:25:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r0, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e9", 0xa2) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c1a000-0x10)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) [ 306.437439] binder: 29358:29366 transaction failed 29189/-22, size 0-0 line 2842 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r0}, 0x10) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x0, &(0x7f0000000000)="c8d63f23", 0x4) [ 306.485112] binder: 29358:29366 transaction failed 29189/-22, size 0-8 line 2842 2018/02/10 11:25:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976", 0xbd) 2018/02/10 11:25:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:26 executing program 3: mmap(&(0x7f0000000000/0x427000)=nil, 0x427000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000003000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x15}}, 0x10) sendmsg$rds(r0, &(0x7f0000007000-0x38)={&(0x7f0000014000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000)=[], 0x0, &(0x7f000000f000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000013000-0xba)=""/186, 0xba}, &(0x7f0000006000)=[{&(0x7f0000014000-0x69)=""/122, 0x15ea15c6}], 0x1}}], 0x48}, 0x0) 2018/02/10 11:25:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r0}, 0x10) 2018/02/10 11:25:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000), 0x0) 2018/02/10 11:25:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) [ 306.529219] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.535560] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.579182] [ 306.580302] binder: 29396:29405 transaction failed 29189/-22, size 0-0 line 2842 [ 306.581029] ============================= [ 306.592712] WARNING: suspicious RCU usage [ 306.596912] 4.15.0+ #307 Not tainted [ 306.600656] ----------------------------- [ 306.601473] binder: 29396:29408 transaction failed 29189/-22, size 0-8 line 2842 [ 306.604842] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 306.604846] [ 306.604846] other info that might help us debug this: [ 306.604846] [ 306.604852] [ 306.604852] rcu_scheduler_active = 2, debug_locks = 1 [ 306.604857] 1 lock held by syz-executor3/29404: [ 306.604861] #0: (rcu_read_lock){....}, at: [<000000009639d0f3>] __rds_conn_create+0xe46/0x1b50 [ 306.636822] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.641193] [ 306.641193] stack backtrace: [ 306.641205] CPU: 0 PID: 29404 Comm: syz-executor3 Not tainted 4.15.0+ #307 [ 306.641210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.641214] Call Trace: 2018/02/10 11:25:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/10 11:25:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) [ 306.641230] dump_stack+0x194/0x257 [ 306.641248] ? arch_local_irq_restore+0x53/0x53 [ 306.655734] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.660065] lockdep_rcu_suspicious+0x123/0x170 [ 306.660082] ___might_sleep+0x385/0x470 [ 306.660093] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 306.707105] ? debug_mutex_init+0x1c/0x60 [ 306.711236] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 306.716235] __might_sleep+0x95/0x190 [ 306.720026] kmem_cache_alloc+0x2a2/0x760 [ 306.724148] ? lock_acquire+0x1d5/0x580 [ 306.728101] ? __rds_conn_create+0xe46/0x1b50 [ 306.732571] ? SyS_membarrier+0x700/0x700 [ 306.736692] ? init_timer_key+0x163/0x3f0 [ 306.740821] rds_tcp_conn_alloc+0xa7/0x4e0 [ 306.745040] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 306.749428] ? rds_cmsg_atomic+0xff0/0xff0 [ 306.753644] ? __lockdep_init_map+0xe4/0x650 [ 306.758029] ? rds_cmsg_atomic+0xff0/0xff0 [ 306.762244] __rds_conn_create+0x112f/0x1b50 [ 306.766654] ? rds_conn_drop+0xb0/0xb0 [ 306.770519] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 306.775514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.780247] ? __raw_spin_lock_init+0x1c/0x100 [ 306.784813] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 306.789811] ? __lockdep_init_map+0xe4/0x650 [ 306.794199] ? lockdep_init_map+0x9/0x10 [ 306.798237] ? __init_waitqueue_head+0x97/0x140 [ 306.802883] ? init_wait_entry+0x1b0/0x1b0 [ 306.807099] ? lockdep_init_map+0x9/0x10 [ 306.811140] ? rds_message_alloc+0x28c/0x330 [ 306.815522] ? rds_message_next_extension+0x210/0x210 [ 306.820692] ? rds_rdma_extra_size+0x205/0x2b0 [ 306.825692] ? rds_atomic_free_op+0x330/0x330 [ 306.830162] ? lock_sock_nested+0x91/0x110 [ 306.834380] rds_conn_create_outgoing+0x3f/0x50 [ 306.839032] rds_sendmsg+0xda3/0x2390 [ 306.842825] ? rds_send_drop_to+0x19d0/0x19d0 [ 306.847314] ? find_held_lock+0x35/0x1d0 [ 306.851355] ? sock_has_perm+0x2a4/0x420 [ 306.855392] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 306.860728] ? lock_downgrade+0x980/0x980 [ 306.864856] ? lock_release+0xa40/0xa40 [ 306.868821] ? selinux_socket_sendmsg+0x36/0x40 [ 306.873466] ? security_socket_sendmsg+0x89/0xb0 [ 306.878194] ? rds_send_drop_to+0x19d0/0x19d0 [ 306.882665] sock_sendmsg+0xca/0x110 [ 306.886355] ___sys_sendmsg+0x767/0x8b0 [ 306.890312] ? copy_msghdr_from_user+0x590/0x590 [ 306.895043] ? __schedule+0x8ea/0x2040 [ 306.898911] ? __sched_text_start+0x8/0x8 [ 306.903046] ? __fget_light+0x2b2/0x3c0 [ 306.907000] ? fget_raw+0x20/0x20 [ 306.910470] __sys_sendmsg+0xe5/0x210 [ 306.914246] ? __sys_sendmsg+0xe5/0x210 [ 306.918196] ? SyS_shutdown+0x290/0x290 [ 306.922156] ? exit_to_usermode_loop+0x8c/0x2f0 [ 306.926812] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 306.932331] SyS_sendmsg+0x2d/0x50 [ 306.935845] ? __sys_sendmsg+0x210/0x210 [ 306.939882] do_syscall_64+0x282/0x940 [ 306.943746] ? __do_page_fault+0xc90/0xc90 [ 306.947961] ? finish_task_switch+0x1e2/0x890 [ 306.952812] ? finish_task_switch+0x1b9/0x890 [ 306.957287] ? syscall_return_slowpath+0x550/0x550 [ 306.962194] ? syscall_return_slowpath+0x2ac/0x550 [ 306.967098] ? prepare_exit_to_usermode+0x350/0x350 [ 306.972092] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 306.977439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.982263] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 306.987425] RIP: 0033:0x453a59 [ 306.990591] RSP: 002b:00007f5ed9b3ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.998276] RAX: ffffffffffffffda RBX: 00007f5ed9b3b6d4 RCX: 0000000000453a59 [ 307.005521] RDX: 0000000000000000 RSI: 0000000020006fc8 RDI: 0000000000000013 [ 307.012765] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 307.020009] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 307.027254] R13: 00000000000004b5 R14: 00000000006f7198 R15: 0000000000000000 [ 307.034721] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 307.042201] in_atomic(): 1, irqs_disabled(): 0, pid: 29404, name: syz-executor3 [ 307.049667] 1 lock held by syz-executor3/29404: [ 307.054333] #0: (rcu_read_lock){....}, at: [<000000009639d0f3>] __rds_conn_create+0xe46/0x1b50 [ 307.063285] CPU: 0 PID: 29404 Comm: syz-executor3 Not tainted 4.15.0+ #307 [ 307.070279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.079611] Call Trace: [ 307.082171] dump_stack+0x194/0x257 [ 307.085775] ? arch_local_irq_restore+0x53/0x53 [ 307.090422] ? print_lock+0x9f/0xa2 [ 307.094030] ? lockdep_print_held_locks+0xc4/0x130 [ 307.098936] ___might_sleep+0x2b2/0x470 [ 307.102883] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 307.108739] ? debug_mutex_init+0x1c/0x60 [ 307.112862] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 307.117856] __might_sleep+0x95/0x190 [ 307.121637] kmem_cache_alloc+0x2a2/0x760 [ 307.125757] ? lock_acquire+0x1d5/0x580 [ 307.129702] ? __rds_conn_create+0xe46/0x1b50 [ 307.134168] ? SyS_membarrier+0x700/0x700 [ 307.138286] ? init_timer_key+0x163/0x3f0 [ 307.142410] rds_tcp_conn_alloc+0xa7/0x4e0 [ 307.146624] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 307.151004] ? rds_cmsg_atomic+0xff0/0xff0 [ 307.155220] ? __lockdep_init_map+0xe4/0x650 [ 307.159608] ? rds_cmsg_atomic+0xff0/0xff0 [ 307.163816] __rds_conn_create+0x112f/0x1b50 [ 307.168216] ? rds_conn_drop+0xb0/0xb0 [ 307.172078] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 307.177066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.181799] ? __raw_spin_lock_init+0x1c/0x100 [ 307.186358] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 307.191350] ? __lockdep_init_map+0xe4/0x650 [ 307.195734] ? lockdep_init_map+0x9/0x10 [ 307.199767] ? __init_waitqueue_head+0x97/0x140 [ 307.204411] ? init_wait_entry+0x1b0/0x1b0 [ 307.208623] ? lockdep_init_map+0x9/0x10 [ 307.212660] ? rds_message_alloc+0x28c/0x330 [ 307.217041] ? rds_message_next_extension+0x210/0x210 [ 307.222204] ? rds_rdma_extra_size+0x205/0x2b0 [ 307.226763] ? rds_atomic_free_op+0x330/0x330 [ 307.231231] ? lock_sock_nested+0x91/0x110 [ 307.235440] rds_conn_create_outgoing+0x3f/0x50 [ 307.240086] rds_sendmsg+0xda3/0x2390 [ 307.243876] ? rds_send_drop_to+0x19d0/0x19d0 [ 307.248357] ? find_held_lock+0x35/0x1d0 [ 307.252400] ? sock_has_perm+0x2a4/0x420 [ 307.256435] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 307.261769] ? lock_downgrade+0x980/0x980 [ 307.265893] ? lock_release+0xa40/0xa40 [ 307.269853] ? selinux_socket_sendmsg+0x36/0x40 [ 307.274507] ? security_socket_sendmsg+0x89/0xb0 [ 307.279236] ? rds_send_drop_to+0x19d0/0x19d0 [ 307.283705] sock_sendmsg+0xca/0x110 [ 307.287393] ___sys_sendmsg+0x767/0x8b0 [ 307.291348] ? copy_msghdr_from_user+0x590/0x590 [ 307.296077] ? __schedule+0x8ea/0x2040 [ 307.299942] ? __sched_text_start+0x8/0x8 [ 307.304069] ? __fget_light+0x2b2/0x3c0 [ 307.308026] ? fget_raw+0x20/0x20 [ 307.311483] __sys_sendmsg+0xe5/0x210 [ 307.315258] ? __sys_sendmsg+0xe5/0x210 [ 307.319205] ? SyS_shutdown+0x290/0x290 [ 307.323162] ? exit_to_usermode_loop+0x8c/0x2f0 [ 307.327813] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 307.333330] SyS_sendmsg+0x2d/0x50 [ 307.336840] ? __sys_sendmsg+0x210/0x210 [ 307.340874] do_syscall_64+0x282/0x940 [ 307.344735] ? __do_page_fault+0xc90/0xc90 [ 307.348942] ? finish_task_switch+0x1e2/0x890 [ 307.353408] ? finish_task_switch+0x1b9/0x890 [ 307.357877] ? syscall_return_slowpath+0x550/0x550 [ 307.362779] ? syscall_return_slowpath+0x2ac/0x550 [ 307.367682] ? prepare_exit_to_usermode+0x350/0x350 [ 307.372672] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 307.378020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.382844] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 307.388006] RIP: 0033:0x453a59 [ 307.391173] RSP: 002b:00007f5ed9b3ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.398851] RAX: ffffffffffffffda RBX: 00007f5ed9b3b6d4 RCX: 0000000000453a59 [ 307.406095] RDX: 0000000000000000 RSI: 0000000020006fc8 RDI: 0000000000000013 [ 307.413336] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 307.420582] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 2018/02/10 11:25:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/10 11:25:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000), 0x0) 2018/02/10 11:25:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976", 0xbd) 2018/02/10 11:25:27 executing program 3: mmap(&(0x7f0000000000/0x427000)=nil, 0x427000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000003000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x15}}, 0x10) sendmsg$rds(r0, &(0x7f0000007000-0x38)={&(0x7f0000014000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000)=[], 0x0, &(0x7f000000f000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000013000-0xba)=""/186, 0xba}, &(0x7f0000006000)=[{&(0x7f0000014000-0x69)=""/122, 0x15ea15c6}], 0x1}}], 0x48}, 0x0) 2018/02/10 11:25:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 307.427823] R13: 00000000000004b5 R14: 00000000006f7198 R15: 0000000000000000 2018/02/10 11:25:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000), 0x0) 2018/02/10 11:25:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976", 0xbd) [ 307.480293] binder_alloc: 29419: binder_alloc_buf, no vma [ 307.485951] binder: 29419:29430 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/10 11:25:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6", 0xcb) 2018/02/10 11:25:27 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x100) 2018/02/10 11:25:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d6", 0x2) 2018/02/10 11:25:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) [ 307.522488] binder_alloc: 29419: binder_alloc_buf, no vma [ 307.528134] binder: 29419:29443 transaction failed 29189/-3, size 0-8 line 2957 [ 307.549408] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.554932] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6", 0xcb) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x100) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) [ 307.593454] binder_alloc: 29450: binder_alloc_buf, no vma [ 307.599158] binder: 29450:29460 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d6", 0x2) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6", 0xcb) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x100) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) [ 307.643554] binder_alloc: 29450: binder_alloc_buf, no vma [ 307.649318] binder: 29450:29470 transaction failed 29189/-3, size 0-8 line 2957 [ 307.667294] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.676293] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x100) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a4020000000000", 0xd2) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d6", 0x2) [ 307.691081] binder_alloc: 29484: binder_alloc_buf, no vma [ 307.696741] binder: 29484:29489 transaction failed 29189/-3, size 0-0 line 2957 [ 307.719900] binder_alloc: 29484: binder_alloc_buf, no vma [ 307.725568] binder: 29484:29496 transaction failed 29189/-3, size 0-8 line 2957 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a4020000000000", 0xd2) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r0 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f", 0x3) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0x0, &(0x7f0000132000/0x2000)=nil, 0x100) [ 307.763279] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.769604] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f", 0x3) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a4020000000000", 0xd2) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0x0, &(0x7f0000132000/0x2000)=nil, 0x100) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r0 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) [ 307.808656] binder: 29517:29521 transaction failed 29189/-22, size 0-8 line 2842 [ 307.846362] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r0 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bb", 0xd5) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f", 0x3) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0x0, &(0x7f0000132000/0x2000)=nil, 0x100) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) [ 307.899308] binder: 29540:29543 transaction failed 29189/-22, size 0-8 line 2842 [ 307.911439] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x0) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bb", 0xd5) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x0) [ 307.944850] binder: 29557:29561 transaction failed 29189/-22, size 0-8 line 2842 [ 307.981912] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 3: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x0) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bb", 0xd5) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcb", 0xd7) 2018/02/10 11:25:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcb", 0xd7) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f0000748000-0x124)="0200000000000000038e54620001a55eaf0d2cf653f13cc379d1e4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c07c0000000000000987174e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575d0400000000001f0000d1e6ebcb12c7291871363ea5100c4a4c2e9e5c0c14f16597e8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bd005ea1309163d6a40200000000000800bbfbcb", 0xd7) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 1: open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000), 0x0) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000742000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/10 11:25:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:28 executing program 3: r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000), 0x0) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:28 executing program 1: open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10), 0x10) [ 308.551630] binder_alloc: 29731: binder_alloc_buf size 65544 failed, no address space [ 308.559757] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 308.568491] binder: 29731:29737 transaction failed 29201/-28, size 0-8 line 2957 2018/02/10 11:25:29 executing program 3: r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10), 0x10) 2018/02/10 11:25:29 executing program 1: open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000), 0x0) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) [ 308.599268] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.611085] binder: release 29731:29737 transaction 55 out, still active [ 308.618139] binder: undelivered TRANSACTION_COMPLETE [ 308.623292] binder: send failed reply for transaction 55, target dead 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:29 executing program 3: r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab", 0x2) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bbb000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, &(0x7f00005d7000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000742000-0x10), 0x10) [ 308.672801] binder_alloc: 29756: binder_alloc_buf, no vma [ 308.678465] binder: 29756:29758 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') [ 308.722245] binder_alloc: 29756: binder_alloc_buf, no vma [ 308.727953] binder: 29756:29770 transaction failed 29189/-3, size 0-8 line 2957 [ 308.790950] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.796926] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab", 0x2) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:25:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab", 0x2) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab27", 0x3) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) [ 308.880199] binder_alloc: 29795: binder_alloc_buf, no vma [ 308.885870] binder: 29795:29801 transaction failed 29189/-3, size 0-0 line 2957 [ 308.906658] binder_alloc: 29795: binder_alloc_buf, no vma [ 308.912447] binder: 29795:29801 transaction failed 29189/-3, size 0-8 line 2957 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x14, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 308.981739] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.992298] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab27", 0x3) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) getpgid(0x0) 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x14, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:25:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x14, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 309.489522] binder_alloc: 29828: binder_alloc_buf, no vma [ 309.495242] binder: 29828:29830 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 11:25:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab27", 0x3) recvmmsg(r1, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') [ 309.529957] binder_alloc: 29828: binder_alloc_buf, no vma [ 309.535606] binder: 29828:29842 transaction failed 29189/-3, size 0-8 line 2957 2018/02/10 11:25:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) 2018/02/10 11:25:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='v4') 2018/02/10 11:25:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) [ 309.634142] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.639918] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 11:25:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x3c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 2018/02/10 11:25:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)) 2018/02/10 11:25:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000172000-0x3c)=@ipv4_delroute={0x34, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @broadcast=0xffffffff}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) [ 309.677922] binder_alloc: 29861: binder_alloc_buf, no vma [ 309.683588] binder: 29861:29869 transaction failed 29189/-3, size 0-0 line 2957 [ 309.696513] binder_alloc: 29861: binder_alloc_buf, no vma [ 309.702247] binder: 29861:29869 transaction failed 29189/-3, size 0-8 line 2957 2018/02/10 11:25:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000692000-0xe)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)) 2018/02/10 11:25:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f29000-0x8), 0x100000002) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(r1, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) fstat(0xffffffffffffffff, &(0x7f000030e000-0x44)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000053f000)) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 2018/02/10 11:25:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) r1 = syz_open_dev$binder(&(0x7f000067d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x90, 0x0, &(0x7f00001e9000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000495000)=[], &(0x7f00000fd000)=[0x58]}, 0x10000}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000f5d000)=[], &(0x7f0000bb7000-0x50)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00002f6000)}) 2018/02/10 11:25:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00004e2000)=0xffffffffffffffff) 2018/02/10 11:25:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000027f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006d6000)="d3ab2719", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000b3000)=[], 0x3dc, 0x0, &(0x7f0000507000)={0x0, 0x989680}) 2018/02/10 11:25:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c,