2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(0xffffffffffffffff, 0x0, r9) [ 257.145632] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 257.165276] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 257.255776] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) 2018/03/30 07:47:56 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0xffffffffffffffff, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r8 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r8, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r8, 0x0, r7) 2018/03/30 07:47:56 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]}, 0x1ad) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f000019a000/0x3000)=nil, 0x3000, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$void(r1, 0x5451) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="05000000289ae491d13c132003e9296ae7d9439bd07c029b2db3231925beafb5ecfec2678be9c99a4852cf01022b3d96aa30c938f48d318ff4eb2a874141f6926233d3ce38d46e86ac38436cf167667223cda1754b67a5a9bc3ae241fcfb51ee7be7afb50937d76b71a8859309096658bcb1dae10ccb267d01f0b8237ff708f5724aefe5dfd2441546558d5ce24814e38b3243248acaddac293ce35a260b66d4d4a8fa9faf088fb44a8203e9ece999580b9adc98a82483fdef7b26a18523a4d530e235def3a0ca0d2a7de772d688a604f241f57c9e058e71f5b537d3c79954dd13f45dc4df3b885dcee3f54a086ead082b", 0xf1}], 0x1, 0x2ffd) sendmsg$nl_netfilter(r3, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="08f7ff001107000427bd7000fbdbdf25070000070c00370008005d00ac1414aa08000000e0000001e010160008003300"], 0x30}, 0x1}, 0x40884) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), 0xffffffffffffffbe) lseek(r3, 0x0, 0x4) socket$l2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/30 07:47:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="05000000289ae491d13c132003e9296ae7d9439bd07c029b2db3231925beafb5ecfec2678be9c99a4852cf01022b3d96aa30c938f48d318ff4eb2a874141f6926233d3ce38d46e86ac38436cf167667223cda1754b67a5a9bc3ae241fcfb51ee7be7afb50937d76b71a8859309096658bcb1dae10ccb267d01f0b8237ff708f5724aefe5dfd2441546558d5ce24814e38b3243248acaddac293ce35a260b66d4d4a8fa9faf088fb44a8203e9ece999580b9adc98a82483fdef7b26a18523a4d530e235def3a0ca0d2a7de772d688a604f241f57c9e058e71f5b537d3c79954dd13f45dc4df3b885dcee3f54a086ead082b", 0xf1}], 0x1, 0x2ffd) sendmsg$nl_netfilter(r3, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="08f7ff001107000427bd7000fbdbdf25070000070c00370008005d00ac1414aa08000000e0000001e010160008003300"], 0x30}, 0x1}, 0x40884) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), 0xffffffffffffffbe) lseek(r3, 0x0, 0x4) socket$l2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) [ 257.376664] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}], 0x1c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) [ 257.423573] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:47:56 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0xffffffffffffffff, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) 2018/03/30 07:47:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="05000000289ae491d13c132003e9296ae7d9439bd07c029b2db3231925beafb5ecfec2678be9c99a4852cf01022b3d96aa30c938f48d318ff4eb2a874141f6926233d3ce38d46e86ac38436cf167667223cda1754b67a5a9bc3ae241fcfb51ee7be7afb50937d76b71a8859309096658bcb1dae10ccb267d01f0b8237ff708f5724aefe5dfd2441546558d5ce24814e38b3243248acaddac293ce35a260b66d4d4a8fa9faf088fb44a8203e9ece999580b9adc98a82483fdef7b26a18523a4d530e235def3a0ca0d2a7de772d688a604f241f57c9e058e71f5b537d3c79954dd13f45dc4df3b885dcee3f54a086ead082b", 0xf1}], 0x1, 0x2ffd) sendmsg$nl_netfilter(r3, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="08f7ff001107000427bd7000fbdbdf25070000070c00370008005d00ac1414aa08000000e0000001e010160008003300"], 0x30}, 0x1}, 0x40884) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), 0xffffffffffffffbe) lseek(r3, 0x0, 0x4) socket$l2tp(0x18, 0x1, 0x1) 2018/03/30 07:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 257.563511] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:47:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="6d006100fbe00400000000000000f777850807ef0adb90d7cd3fed9d8930d35470bc2e9cb9a3143686af806a8ac900000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:57 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000400)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x4000ff) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="7261ff0000000000000000ff5f22b04ec3ff0000000000000000000000000000"], 0x1) [ 257.631973] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 257.721319] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 257.769768] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="05000000289ae491d13c132003e9296ae7d9439bd07c029b2db3231925beafb5ecfec2678be9c99a4852cf01022b3d96aa30c938f48d318ff4eb2a874141f6926233d3ce38d46e86ac38436cf167667223cda1754b67a5a9bc3ae241fcfb51ee7be7afb50937d76b71a8859309096658bcb1dae10ccb267d01f0b8237ff708f5724aefe5dfd2441546558d5ce24814e38b3243248acaddac293ce35a260b66d4d4a8fa9faf088fb44a8203e9ece999580b9adc98a82483fdef7b26a18523a4d530e235def3a0ca0d2a7de772d688a604f241f57c9e058e71f5b537d3c79954dd13f45dc4df3b885dcee3f54a086ead082b", 0xf1}], 0x1, 0x2ffd) sendmsg$nl_netfilter(r3, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="08f7ff001107000427bd7000fbdbdf25070000070c00370008005d00ac1414aa08000000e0000001e010160008003300"], 0x30}, 0x1}, 0x40884) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), 0xffffffffffffffbe) lseek(r3, 0x0, 0x4) 2018/03/30 07:47:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}], 0x1c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) 2018/03/30 07:47:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:47:57 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:57 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/103, &(0x7f0000000200)=0x67) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer2\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x24}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbb}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xfff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="6d000000fbe000002100004083d7801c85aa4d72630032e6911d5b5a6b5e5a81ab916af5f57b5cec5924664efe893ee10c27e702387472d640fe044a50406e72437d986cebdf86139118aa8ad4f763092adbe6a95f17a28760bb9b54373e4cce752d584e4137e932d2787114654e41a8000000000000000000"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="05000000289ae491d13c132003e9296ae7d9439bd07c029b2db3231925beafb5ecfec2678be9c99a4852cf01022b3d96aa30c938f48d318ff4eb2a874141f6926233d3ce38d46e86ac38436cf167667223cda1754b67a5a9bc3ae241fcfb51ee7be7afb50937d76b71a8859309096658bcb1dae10ccb267d01f0b8237ff708f5724aefe5dfd2441546558d5ce24814e38b3243248acaddac293ce35a260b66d4d4a8fa9faf088fb44a8203e9ece999580b9adc98a82483fdef7b26a18523a4d530e235def3a0ca0d2a7de772d688a604f241f57c9e058e71f5b537d3c79954dd13f45dc4df3b885dcee3f54a086ead082b", 0xf1}], 0x1, 0x2ffd) sendmsg$nl_netfilter(r3, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="08f7ff001107000427bd7000fbdbdf25070000070c00370008005d00ac1414aa08000000e0000001e010160008003300"], 0x30}, 0x1}, 0x40884) lseek(r3, 0x0, 0x4) [ 257.876415] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 257.894536] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}], 0x1c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="05000000289ae491d13c132003e9296ae7d9439bd07c029b2db3231925beafb5ecfec2678be9c99a4852cf01022b3d96aa30c938f48d318ff4eb2a874141f6926233d3ce38d46e86ac38436cf167667223cda1754b67a5a9bc3ae241fcfb51ee7be7afb50937d76b71a8859309096658bcb1dae10ccb267d01f0b8237ff708f5724aefe5dfd2441546558d5ce24814e38b3243248acaddac293ce35a260b66d4d4a8fa9faf088fb44a8203e9ece999580b9adc98a82483fdef7b26a18523a4d530e235def3a0ca0d2a7de772d688a604f241f57c9e058e71f5b537d3c79954dd13f45dc4df3b885dcee3f54a086ead082b", 0xf1}], 0x1, 0x2ffd) lseek(r3, 0x0, 0x4) 2018/03/30 07:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:57 executing program 4 (fault-call:13 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:47:57 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) [ 258.041907] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7330}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) [ 258.138598] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 258.154376] FAULT_INJECTION: forcing a failure. [ 258.154376] name failslab, interval 1, probability 0, space 0, times 0 [ 258.165869] CPU: 0 PID: 32145 Comm: syz-executor4 Not tainted 4.16.0-rc7+ #371 [ 258.173237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.182588] Call Trace: [ 258.185162] dump_stack+0x194/0x24d [ 258.188772] ? arch_local_irq_restore+0x53/0x53 [ 258.193434] should_fail+0x8c0/0xa40 [ 258.197135] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.202231] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 258.207409] ? find_held_lock+0x35/0x1d0 [ 258.211476] ? check_same_owner+0x320/0x320 [ 258.215779] ? rcu_note_context_switch+0x710/0x710 [ 258.220698] should_failslab+0xec/0x120 [ 258.224661] kmem_cache_alloc_node_trace+0x5a/0x760 [ 258.229657] ? trace_event_raw_event_lock+0x340/0x340 [ 258.234823] ? lock_acquire+0x1d5/0x580 [ 258.238774] ? alloc_set_pte+0xefd/0x1590 [ 258.242910] __get_vm_area_node+0xae/0x340 [ 258.247130] __vmalloc_node_range+0xa3/0x650 [ 258.251518] ? bpf_prog_alloc+0xaa/0x350 [ 258.255553] ? usercopy_abort+0xd0/0xd0 [ 258.259519] __vmalloc+0x45/0x50 [ 258.262863] ? bpf_prog_alloc+0xaa/0x350 [ 258.266901] bpf_prog_alloc+0xaa/0x350 [ 258.270770] ? bpf_prog_kallsyms_find+0x440/0x440 [ 258.275598] ? mpi_resize+0x200/0x200 [ 258.279381] ? __lock_is_held+0xb6/0x140 [ 258.283430] bpf_prog_load+0x2e3/0x1bb0 [ 258.287387] ? bpf_prog_new_fd+0x50/0x50 [ 258.291424] ? __lock_acquire+0x664/0x3e00 [ 258.295648] ? find_held_lock+0x35/0x1d0 [ 258.299696] ? __might_fault+0x110/0x1d0 [ 258.303736] ? lock_downgrade+0x980/0x980 [ 258.307867] ? lock_release+0xa40/0xa40 [ 258.311820] ? check_same_owner+0x320/0x320 [ 258.316118] ? __check_object_size+0x8b/0x530 [ 258.320600] ? __might_sleep+0x95/0x190 [ 258.324563] ? security_bpf+0x89/0xb0 [ 258.328348] SyS_bpf+0xe0f/0x4830 [ 258.331781] ? trace_hardirqs_off+0x10/0x10 [ 258.336077] ? __fdget_pos+0x12b/0x190 [ 258.339946] ? bpf_prog_get+0x20/0x20 [ 258.343735] ? trace_event_raw_event_lock+0x340/0x340 [ 258.348907] ? find_held_lock+0x35/0x1d0 [ 258.352955] ? perf_trace_lock+0xd6/0x900 [ 258.357091] ? trace_event_raw_event_lock+0x340/0x340 [ 258.362257] ? _parse_integer+0x140/0x140 [ 258.366378] ? check_same_owner+0x320/0x320 [ 258.370683] ? find_held_lock+0x35/0x1d0 [ 258.374728] ? trace_hardirqs_off+0x10/0x10 [ 258.379038] ? get_pid_task+0x93/0x140 [ 258.382906] ? perf_trace_lock+0xd6/0x900 [ 258.387058] ? find_held_lock+0x35/0x1d0 [ 258.391109] ? __f_unlock_pos+0x19/0x20 [ 258.395072] ? lock_downgrade+0x980/0x980 [ 258.399199] ? get_pid_task+0xbc/0x140 [ 258.403065] ? proc_fail_nth_write+0x9b/0x1d0 [ 258.407537] ? map_files_get_link+0x3a0/0x3a0 [ 258.412015] ? handle_mm_fault+0x35b/0xb10 [ 258.416238] ? find_held_lock+0x35/0x1d0 [ 258.420282] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 258.425103] ? vfs_write+0x374/0x510 [ 258.428796] ? wait_for_completion+0x770/0x770 [ 258.433390] ? __sb_end_write+0xa0/0xd0 [ 258.437348] ? fput+0xd2/0x140 [ 258.440519] ? SyS_write+0x184/0x220 [ 258.444224] ? do_syscall_64+0xb7/0x940 [ 258.448181] ? bpf_prog_get+0x20/0x20 [ 258.451960] do_syscall_64+0x281/0x940 [ 258.455824] ? __do_page_fault+0xc90/0xc90 [ 258.460032] ? _raw_spin_unlock_irq+0x27/0x70 [ 258.464506] ? finish_task_switch+0x1c1/0x7e0 [ 258.468978] ? syscall_return_slowpath+0x550/0x550 [ 258.473886] ? syscall_return_slowpath+0x2ac/0x550 [ 258.478793] ? prepare_exit_to_usermode+0x350/0x350 [ 258.483789] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 258.489138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.493968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.499136] RIP: 0033:0x4548b9 [ 258.502300] RSP: 002b:00007fdcb8ef4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.509984] RAX: ffffffffffffffda RBX: 00007fdcb8ef56d4 RCX: 00000000004548b9 [ 258.517231] RDX: 0000000000000048 RSI: 0000000020eb0fb8 RDI: 0000000000000005 [ 258.524478] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 258.531725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 258.538972] R13: 0000000000000045 R14: 00000000006f2718 R15: 0000000000000000 [ 258.546325] syz-executor4: vmalloc: allocation failure: 4096 bytes, mode:0x14280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 258.557358] syz-executor4 cpuset=syz4 mems_allowed=0 [ 258.562520] CPU: 0 PID: 32145 Comm: syz-executor4 Not tainted 4.16.0-rc7+ #371 [ 258.569872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.579225] Call Trace: [ 258.581815] dump_stack+0x194/0x24d [ 258.585456] ? arch_local_irq_restore+0x53/0x53 [ 258.590122] ? idr_get_free+0xfd0/0xfd0 [ 258.594102] ? rcu_pm_notify+0xc0/0xc0 [ 258.598003] warn_alloc+0x19a/0x2b0 [ 258.601634] ? zone_watermark_ok_safe+0x400/0x400 [ 258.606475] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 258.611755] ? lock_acquire+0x1d5/0x580 [ 258.615730] ? alloc_set_pte+0xefd/0x1590 [ 258.619880] ? __get_vm_area_node+0x234/0x340 [ 258.624367] __vmalloc_node_range+0x4f0/0x650 [ 258.628846] ? usercopy_abort+0xd0/0xd0 [ 258.632810] __vmalloc+0x45/0x50 [ 258.636154] ? bpf_prog_alloc+0xaa/0x350 [ 258.640195] bpf_prog_alloc+0xaa/0x350 [ 258.644061] ? bpf_prog_kallsyms_find+0x440/0x440 [ 258.648888] ? mpi_resize+0x200/0x200 [ 258.652675] ? __lock_is_held+0xb6/0x140 [ 258.656734] bpf_prog_load+0x2e3/0x1bb0 [ 258.660695] ? bpf_prog_new_fd+0x50/0x50 [ 258.664735] ? __lock_acquire+0x664/0x3e00 [ 258.668956] ? find_held_lock+0x35/0x1d0 [ 258.673006] ? __might_fault+0x110/0x1d0 [ 258.677049] ? lock_downgrade+0x980/0x980 [ 258.681177] ? lock_release+0xa40/0xa40 [ 258.685129] ? check_same_owner+0x320/0x320 [ 258.689427] ? __check_object_size+0x8b/0x530 [ 258.693910] ? __might_sleep+0x95/0x190 [ 258.697874] ? security_bpf+0x89/0xb0 [ 258.701658] SyS_bpf+0xe0f/0x4830 [ 258.705094] ? trace_hardirqs_off+0x10/0x10 [ 258.709389] ? __fdget_pos+0x12b/0x190 [ 258.713261] ? bpf_prog_get+0x20/0x20 [ 258.717045] ? trace_event_raw_event_lock+0x340/0x340 [ 258.722215] ? find_held_lock+0x35/0x1d0 [ 258.726259] ? perf_trace_lock+0xd6/0x900 [ 258.730393] ? trace_event_raw_event_lock+0x340/0x340 [ 258.735561] ? _parse_integer+0x140/0x140 [ 258.739689] ? check_same_owner+0x320/0x320 [ 258.743992] ? find_held_lock+0x35/0x1d0 [ 258.748037] ? trace_hardirqs_off+0x10/0x10 [ 258.752341] ? get_pid_task+0x93/0x140 [ 258.756208] ? perf_trace_lock+0xd6/0x900 [ 258.760342] ? find_held_lock+0x35/0x1d0 [ 258.764389] ? __f_unlock_pos+0x19/0x20 [ 258.768341] ? lock_downgrade+0x980/0x980 [ 258.772467] ? get_pid_task+0xbc/0x140 [ 258.776334] ? proc_fail_nth_write+0x9b/0x1d0 [ 258.780808] ? map_files_get_link+0x3a0/0x3a0 [ 258.785281] ? handle_mm_fault+0x35b/0xb10 [ 258.789501] ? find_held_lock+0x35/0x1d0 [ 258.793548] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 258.798368] ? vfs_write+0x374/0x510 [ 258.802059] ? wait_for_completion+0x770/0x770 [ 258.806650] ? __sb_end_write+0xa0/0xd0 [ 258.810614] ? fput+0xd2/0x140 [ 258.813783] ? SyS_write+0x184/0x220 [ 258.817485] ? do_syscall_64+0xb7/0x940 [ 258.821443] ? bpf_prog_get+0x20/0x20 [ 258.825223] do_syscall_64+0x281/0x940 [ 258.829088] ? __do_page_fault+0xc90/0xc90 [ 258.833297] ? _raw_spin_unlock_irq+0x27/0x70 [ 258.837770] ? finish_task_switch+0x1c1/0x7e0 [ 258.842247] ? syscall_return_slowpath+0x550/0x550 [ 258.847156] ? syscall_return_slowpath+0x2ac/0x550 [ 258.852064] ? prepare_exit_to_usermode+0x350/0x350 [ 258.857061] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 258.862409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.867242] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.872413] RIP: 0033:0x4548b9 [ 258.875581] RSP: 002b:00007fdcb8ef4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.883268] RAX: ffffffffffffffda RBX: 00007fdcb8ef56d4 RCX: 00000000004548b9 [ 258.890517] RDX: 0000000000000048 RSI: 0000000020eb0fb8 RDI: 0000000000000005 [ 258.897765] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 258.905016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 258.912263] R13: 0000000000000045 R14: 00000000006f2718 R15: 0000000000000000 [ 258.919587] Mem-Info: [ 258.922051] active_anon:137421 inactive_anon:73 isolated_anon:0 [ 258.922051] active_file:3895 inactive_file:8396 isolated_file:0 [ 258.922051] unevictable:0 dirty:199 writeback:0 unstable:0 [ 258.922051] slab_reclaimable:12968 slab_unreclaimable:107711 [ 258.922051] mapped:24592 shmem:79 pagetables:854 bounce:0 [ 258.922051] free:1320374 free_pcp:456 free_cma:0 [ 258.955613] Node 0 active_anon:539360kB inactive_anon:292kB active_file:15580kB inactive_file:33584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98368kB dirty:796kB writeback:0kB shmem:316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 69632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 258.983607] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.009798] lowmem_reserve[]: 0 2851 6358 6358 [ 259.014441] Node 0 DMA32 free:2921248kB min:30224kB low:37780kB high:45336kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2922084kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:832kB local_pcp:148kB free_cma:0kB [ 259.042169] lowmem_reserve[]: 0 0 3507 3507 [ 259.046552] Node 0 Normal free:2367140kB min:37188kB low:46484kB high:55780kB active_anon:529024kB inactive_anon:292kB active_file:15580kB inactive_file:33584kB unevictable:0kB writepending:796kB present:4718592kB managed:3592080kB mlocked:0kB kernel_stack:4928kB pagetables:3268kB bounce:0kB free_pcp:1096kB local_pcp:516kB free_cma:0kB [ 259.076439] lowmem_reserve[]: 0 0 0 0 [ 259.080282] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 259.093952] Node 0 DMA32: 2*4kB (M) 3*8kB (UM) 4*16kB (UM) 4*32kB (M) 1*64kB (U) 2*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 710*4096kB (M) = 2921248kB [ 259.109732] Node 0 Normal: 1807*4kB (UME) 291*8kB (UME) 451*16kB (UME) 1869*32kB (UME) 1221*64kB (UME) 289*128kB (UM) 64*256kB (UM) 11*512kB (UM) 1*1024kB (E) 11*2048kB (ME) 520*4096kB (M) = 2367204kB [ 259.127842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.136433] 12369 total pagecache pages 2018/03/30 07:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x0, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r3, 0x0, 0x4) [ 259.140435] 0 pages in swap cache [ 259.143897] Swap cache stats: add 0, delete 0, find 0/0 [ 259.149308] Free swap = 0kB [ 259.152361] Total swap = 0kB [ 259.155412] 1965969 pages RAM [ 259.158551] 0 pages HighMem/MovableOnly [ 259.162553] 333451 pages reserved 2018/03/30 07:47:58 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 2018/03/30 07:47:58 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) [ 259.278586] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 259.314212] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x0, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) [ 259.366591] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:58 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000240)=0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r2, 0x0, 0x4) 2018/03/30 07:47:58 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]}, 0x18a) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@kern={0x10}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x39, 0x200, 0x70bd2d, 0x25dfdc01}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:58 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) r5 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x42, 0x123000) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000000c0)={&(0x7f00000df000/0x1000)=nil, 0x4, 0x4, 0x9, &(0x7f0000134000/0x1000)=nil, 0x7}) 2018/03/30 07:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 259.471981] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 259.492207] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:47:59 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:47:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x0, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) [ 259.630820] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40}) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240), 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000040)={r5}) r9 = fcntl$getown(r4, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) 2018/03/30 07:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x203, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x100) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="6d000000fbe000002300004083d78e1c8540b7f2d2747886088a7dd74907b91f0b7aac811d96b89ee6d82ec8f3f129ecf044378577287eccc059587b35d3a8ec74636d30deeb9bcf5584e51c6ba1d352377eaf60f4d484a48e71310bb4b1d4605e93941a42bb8eea313ff003a6cd527af0a14f42ad3ff4de50dbc2a587c2c14830279c4fcdcf840ac191f44503020ac3eacfade19660db4a9c70ab37e738c4ecc79753126ef937cfa2fa4a8c49eecd1e0000133423a0fabd680000000000000000000000000000000000000000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:59 executing program 3: r0 = socket$inet(0x2, 0x1000000, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0xfffffffffffffffe, 0x800000000000803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000b80)=@broute={'broute\x00', 0x20, 0x3, 0x4c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200012c0], 0x0, &(0x7f00000005c0), &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001100000010000000600273797a6b616c6c657230000000000000626f6e643000000000000000000000006772657461703000000000000000000065716c00000000000000000000000000aaaaaaaaaa170000ffffff92aaaaaaaaaaaaff00ffffff000000e8000000180100004801000069703600000000000000000000000000000000000000000000000000000000005000000000000000ff020000000000000000000000000001fe80000000000000000000000000001700000000ffeaf8ed7956c20f00ffff00fff607001c4e244e234e204e210000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000dbd02779832100000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff020000001e00000004000000000365716c0000000000000000000000000079616d3000000000000000000000000073797a5f74756e00000000000000000069705f76746930000000000000000000ffffffffffff00ffffffffffaaaaaaaaaa140000ffffff000000a0000000a0000000180100006370750000000000000000000000000000000000000000000000000000000000080000000000000031550000000000004e464c4f47000000000000000000000000000000000000000000000000000000500000000000000006000000ff0fbe00000000003bdbce68667fa3267cba6e35d1266b250be5b816c7115322112dc5b29b72d0e58b028cddc9250d2cbd59f72125de1a2f1e7eecf269ae7ec2666300991d62711600000000030000006000000088a273797a5f74756e00000000000000000065716c000000000000000000000000006263736630000000000000000000000067726574617030350000000000000000aaaaaaaaaaaa00ffffffffffaaaaaaaaaaaaffffff0000ff00005801000088010000d801000068656c7065720000000000000000000000000000000000000000000000000000280000000000000001000000616d616e64610000000000000000000000000000000000000000000000000000000000007068797364657600000000000000000000000000000000000000000000000000700000000000000074756e6c3000000000000000000000000000000000000000000000000000000000000000000000000000000000006970365f76746930000000000000000000000000000000000000000000000000000000000000000000000000000a1100000000000000000000000000000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000005000000000000006c6f670000000000000000000000000000000000000000000000000000000000280000000000000003f585e41ce21301f3c593b1a95d340f487e4f6e278ff053eb893f5787ebc8000200000000000000000000000000000000000000000000"]}, 0x546) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) r6 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x121002) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000880)={"cb05103000005b3004095b1ce4bc8000", 0x2003}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r7 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)=ANY=[@ANYBLOB="100000002300cb0eee2370"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1) 2018/03/30 07:47:59 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r1, 0x0, 0x4) [ 259.735593] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:59 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:47:59 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:47:59 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff00000000001100000000000032c0759f0000000000000000000000000000ffffff7f00000000000000000000ffffffff0000000000000000000000008000000000000000000000000000000000000000000000000000000000000000ffffffff00040000"]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:59 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r0, 0x0, 0x4) [ 259.851141] kvm [32221]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000023 data 0x867874d2f2b74085 2018/03/30 07:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:47:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x169080, 0x0) lseek(r0, 0x0, 0x4) [ 259.902597] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 259.927411] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f00e401000000000000000000000000ff01000000000000000000000000000102000000000000002000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x88000, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:47:59 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) [ 260.039987] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 260.112851] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 2018/03/30 07:47:59 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000800000000000000000ffffffff0000000000000000000000000000000000000000000001000000000000000000000100000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="10e109ac057c931a01395661fe8da62427ee70eb632644db246d9866e3b7f7fec39c510a9c14e1d960c72d912341cc6f4afc567b4407ab5c3ea1e29ed4747c683005b8744f10628240077feb05daf9facd3ac275"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000009000000000000000000950000142786274c430587b08a47528f9fb8c25237b99064fb2d1f5810d762fee8c8ac68a3599f84f08fb02c5169a74ca49c6b"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/03/30 07:47:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 260.311215] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 260.314955] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 260.462897] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:47:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:47:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/03/30 07:47:59 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:47:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="6d0000004d94a5c5ef2c8193c77aa66d5bfbe0000021e9ff7f83d78e1ce9e5ad8ab5dfc9085bfc31fc14d0ce66273aaebcd23ddfeed8ab47976eff7a3a6002c355e90e62665dbbeca008c9e983d8a08e8cfbc062"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:47:59 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000049000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c5ca3e47a5ee38f5772206706800000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r4}) r8 = fcntl$getown(r3, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_proto_private(r9, 0x89eb, &(0x7f0000000480)="72e57e2c3e53939ea74c2e9f3f21cbf1afb86a39ba3a158160877203f3b45511d788e15a60fc5c4a94dde7bb190940290c32f3355751542c3ac611e6a75ba725a06271f3a51a227ebbff3898e3b3d65eba7ceef22b06ceda548475be7654d834bb9c059a884fc8c0ead01733e7e8b8a86499f27eac298ea7ff16932b84409f06a6a6c832dd03e770ea4037e39b29cfeb53969f80b8bebccba63bb23be0bbae481193ade4bf8a37c7d24c32a89cabd55207bb679715986f13d19553b216af233557d54880c7eb6d6f3e7510a5106378715cf9") r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) 2018/03/30 07:47:59 executing program 6 (fault-call:1 fault-nth:0): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 260.600689] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 260.627243] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x20000, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x110, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x11011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3c, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, r1, 0x4}, @acquire_done={0x40106309, r2, 0x3}, @release={0x40046306}, @dead_binder_done={0x40086310, 0x4}], 0x59, 0x0, &(0x7f0000000040)="36cab7dc5120130cb44b4e787389dae7da1266a89600f2ffa045ee82821ae902d225fc6b75406f2ff668dd6399b30f1ef60c4db0bc1d28deb9b16cfda251beaa12e4ff752c3affb50e359cc4e59bed6c67aec0a77cdc57464f"}) lseek(r0, 0x0, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x17, 0x4) 2018/03/30 07:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:00 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x3, 0x0) lseek(r0, 0x0, 0x4) [ 260.787368] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) fadvise64(r3, 0x0, 0x10001, 0x3) socket$kcm(0x29, 0x69416bc71349206e, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000009c0)=ANY=[@ANYRES64=r8, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR64, @ANYRES64=r1], @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRES64=r8, @ANYBLOB="083209feee472556aaaddedfa52aa965cd4c3cbe239d7000f803bfa07d13b963ae84d7e8359c137d273e328d0788d869a157a12daad1cd4eb326c1e62496df6e271f95c1179a5f0a39858345aa00ee5c543c6035b5fbf2898a9b9ec3dd79b586b3a135f1b207cdc88fade023ba6c67d8cfed2cacb86d4ba4b77d05edbd5d745cb1379b68ec6bcddb8239f8eb2892a8f59fc8f9aefdd9e28ae2c54d59c187a4fbcf01ec7170dcbe", @ANYBLOB="d0d27fbfd04ef67bb24aa2acd2bf8c0ddc26d812a269f63294e6764bc2da152bc31ac5686000ff9c92c936541ea3002c81568fb38d9a0650741df35ccbf3e95d77ea47e564cf6222fd1bca2c4ec5cfa396dff479bfd2428b163baf1b64f3fb790abfba656bbed886a22cbf0b9883212ae773a733c96b3ded4ccd9eb78fb4b77f955ac44c20", @ANYPTR64, @ANYRES16, @ANYRES32=r5, @ANYPTR64, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR64, @ANYRES16]], @ANYRES64=r7, @ANYRES16=r4, @ANYRES64=r7]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, &(0x7f0000000140)=""/31, 0x1f, 0x9}, 0x162) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) preadv(r0, &(0x7f00000028c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001240)=""/228, 0xe4}, {&(0x7f0000001340)=""/87, 0x57}, {&(0x7f00000013c0)=""/131, 0x83}, {&(0x7f0000002540)=""/219, 0xdb}, {&(0x7f0000002640)=""/196, 0xc4}, {&(0x7f0000002740)=""/181, 0xb5}, {&(0x7f0000002800)=""/187, 0xbb}], 0x9, 0x6) lseek(r0, 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) [ 260.833496] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r5, 0x0, r9) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={r0, r0, 0x5, 0x3}, 0x10) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/9, 0x9}, {&(0x7f00000013c0)}], 0x8, 0x0) 2018/03/30 07:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:00 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) tee(r0, r0, 0x6, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) [ 261.024732] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 261.087177] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 261.132508] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x8b800000000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x7, 0x2, 0x8, 0x7, 0x7, 0x3}]}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x40) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000000c0)=0x20) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:00 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f454ebed90275ddb6f836ecddf95513407c9b11fd80400000000000000ac5b77b2a0ab8c132390e1"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:00 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r6, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000f40)={0x10, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177000000efc5c2ff000000000000000000000000000089c7f9c35be7dcb2a85e00624f00000000ddff00007e0300000000000032adb5b75d7fa2d3e89c8d3736ea51cd02bb7989f3ad9ca89af7e45ca4d6e3b677e5c615deb282ba56263a026b69f9502c590d7530fa58c3b5ada583208b2ae66ca1fb21b8a611dace180b0f32a1fc8c2b8f3278280a4705e2ded41724aa8dfde3f1a76dc923771e68ad40ab147a9cd9f9d0a88ab8a2942546c3c6"], 0x1) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 261.259255] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 261.279509] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) [ 261.428795] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:00 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:00 executing program 6: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x6200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0) setns(r1, 0x35e5622d9e006711) lseek(r1, 0x0, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r2, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/212, 0xd4}) 2018/03/30 07:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:00 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x1b, 0x801, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="04000000fbe000002100004083d71a76e98fde38448e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair(0x13, 0x805, 0x2c11, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000000c0)=0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xee, 0x0, 0x3f}) 2018/03/30 07:48:00 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000040)={0x0, 0x3ff}) 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x7ff, 0x4) lseek(r0, 0x0, 0x4) [ 261.565210] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 261.587272] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:01 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) [ 261.674662] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 261.760240] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @remote, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x12}, r1}, 0x14) lseek(r0, 0x0, 0x4) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x10001, 0x20000) 2018/03/30 07:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1c400, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff0100000000000000006c000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffcb}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x9, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x31, @ipv4={[], [0xff, 0xff]}, 0x9}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x6}, @in={0x2, 0x4e20, @rand_addr=0x8000}, @in6={0xa, 0x4e23, 0x80, @mcast2={0xff, 0x2, [], 0x1}, 0x624}], 0xd0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r9) 2018/03/30 07:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x5, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1a) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="6d001a7cc3f76329a5e2004083d78e1c85ce9ff4f443417276176227b70bceac50a22cd6be1bc588b3f4ac3f767a235fdb14559e04e794c0ce58eae8a5a3cb0eb8861664648ec68a8f1aff9821d200d4bd7fb1c52d932eed472f2b445e6cca2e1749d9"]) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x220100, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:01 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:01 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="10000000230000022abd7000ffdbdf25004b33cbb766bd2876314bae7dd05f7b436b031148ff113dd31f4db996f8a11f660f0cdc1def34556b46a380"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl(r0, 0x1f, &(0x7f0000001040)="2c53f7bef1a06d6d784d402813d9f48097b93bd06dd2fdc1e78d06f4ee60") getsockopt(r0, 0x5, 0x3, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) lseek(r0, 0x0, 0x4) [ 261.950162] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 261.965010] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/03/30 07:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r3}) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0xfffffffffffffffe, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:01 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[], 0x0) 2018/03/30 07:48:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r9) [ 262.093563] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:01 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x9) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x4880) socket$can_bcm(0x1d, 0x2, 0x2) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0xd88, 0x402) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x3, 0x0, [{0x484, 0x0, 0x100}, {0x254, 0x0, 0x7fffffff}, {0xbe7, 0x0, 0x3}]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20c001, 0x0) getsockopt$inet6_dccp_buf(r6, 0x21, 0xcc, &(0x7f0000000240)=""/98, &(0x7f0000000140)=0x62) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port1\x00', 0xea, 0x0, 0x3f}) [ 262.185960] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000104000/0x2000)=nil, 0x2000, 0x5, 0x14, r2, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000240), 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r4, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000040)={r4}) r9 = fcntl$getown(r3, 0x9) accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0), 0x36f) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000140)={0xfff, 0x7, r9, 0x4, r11, 0x5, 0x200, 0x3f}) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r12, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r12, 0x0, r10) 2018/03/30 07:48:01 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/103, &(0x7f0000000200)=0x67) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0xf8) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:01 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/101) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x410000, 0x0) lseek(r0, 0x0, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) [ 262.313196] kernel msg: ebtables bug: please report to author: Wrong len argument [ 262.418768] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:01 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x101404, 0x0) lseek(r0, 0x0, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2018/03/30 07:48:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r9) 2018/03/30 07:48:01 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:01 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[], 0x0) 2018/03/30 07:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0xffff, 0xffffffef, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:01 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="0000000000047ac3210dec5a9cb09d77f990b5000000000000000000ec4cfcf40000000000000000000000000000000000ce3976b15301167b00ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000053f70000000000000000000000ffffffff8a72c82b990673cde91227a609932d51dc44bacd83fe141ac6ae02509ae70928e6708d0c92a1b10ccb04d3ed8b2b2ce042"]}, 0x144) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = socket(0x11, 0x100000802, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3d}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYBLOB="a3debc74f73eae50806bb04267b0311b563186a46982f2b84ea36e6635fc07f7900a58495bfdeaadb3cb8388d4cb53ce8552507efd42ae184786d0bb16eada042c55edaa5d4ddb763b01d57dd8a9465d86133a99b640ae71aadeb962107d6a446d1d5e1ed8", @ANYPTR=&(0x7f0000001140)=ANY=[@ANYRES64=r8, @ANYRES32=r5, @ANYBLOB="8515e20abdb5f9566c79911d651aab003bda40620b739d05b54742f5b85425254122bd8eacf796b97ecafc7aabfd1fa8c732510dbcd0f0a250e7fa8ebdf7cd1afdc261e99db1a9fb0beede8e8f3c03cb5782af3b48b24c4dabc9adc2ffe9661f85dd12547267fb33726d20241b28ee02d2f7d07182722e831e8642add6a0c470860c37", @ANYRES16=r4, @ANYPTR64, @ANYPTR64], @ANYBLOB="48b594d515cc7781a6c375a9e1d604356e8f851c82f750e4a5b27308a015559ddc36414ddcf4395be313893bb6591e4c3db31596d3f9b95dc534ae0db8519961e10e00ff2a849e8b06df69a036b1945308e747a1b6cf848a2c5ee99a1225171cfeeb984b8c2007e3", @ANYPTR64], @ANYRES64=r4, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES16=r8], @ANYRES32=r3, @ANYRES16=r2], 0x5}, 0x1}, 0x4004) r9 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r9, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)=ANY=[@ANYBLOB="10000707000000022abd7000ffdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r6, r7) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) fstatfs(r3, &(0x7f0000000080)=""/51) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:01 executing program 6: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffff9c}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000140)={{r3, r4/1000+10000}, {r1, r2/1000+10000}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x101001, 0x0) lseek(r0, 0x0, 0x0) [ 262.573794] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 262.588456] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) 2018/03/30 07:48:02 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) 2018/03/30 07:48:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:02 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[], 0x0) 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, r1, 0x0, 0x70bd26, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4000000000000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)={0x6}) lseek(r0, 0x0, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x8, 0x10, 0x1, 0xf36}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)={r3, 0xdb, "478491c624d0c319757dfa28306d57c57e839b18e20877c002e519105ad0c197024e07c8a8fcae8827ed707fab424e9801c8c5d0fd1e6561aea3fa850183908d75642c43270981b1073726943dfd6ad7e5ff013196a63822af414252c4aa0164e3becfd5e3a569d72fcd84091ac14c5659353476b125d6ec037702a80788834c5d0e26cfb391a76b367fcc20133f03ecbe8facbf6958ce483b69a6b9ac69da8248925f8f811774b461e6f8cc0725b9f94fa7d7e443c8e9fca8ef30f3013d21722c91e9f3e10533ffb8a6f4b6b4cbf66c1d0fd16046f15397a09e17"}, &(0x7f0000000500)=0xe3) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x3ce, @loopback={0x0, 0x1}, 0x510}}, {{0xa, 0x4e22, 0x63a, @local={0xfe, 0x80, [], 0xaa}, 0x6}}, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x7}}, {{0xa, 0x4e22, 0x8, @ipv4={[], [0xff, 0xff], @rand_addr=0x74bb}, 0x80000001}}, {{0xa, 0x4e24, 0xffffffffffff7fff, @loopback={0x0, 0x1}, 0x1c}}]}, 0x310) [ 262.720634] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x401, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:02 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(r1, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000000000, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x12}, @dev={0xfe, 0x80, [], 0x11}, 0x3, 0x0, 0x4, 0x100, 0x81, 0x11, r2}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240), 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000086544c9b6320bb3909d5d3ae7bd173b33ccac9b128e3040650fe0ec0c9bcdcc8219863154da0254ff2f03f61b7cea0677ebf5f80fd53468a89b33862483e13ff35f7a62e9d12efd4c9376f8a559135ab", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000040)={r5}) r9 = fcntl$getown(r4, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r12, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r12, 0x0, r11) 2018/03/30 07:48:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) [ 262.819943] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:02 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000094b4f087a914b95e0000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000099e118e216c7a1dec3c10676e87c712eae89514915da3d4c003788a8b1b7270737b72ef5d8003616ad47c85aaae6c7eb16abd7d6cb33e0280809864ae00e2ff2e12c932caf0efdeab5eb362466"]}, 0x155) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:02 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x1) 2018/03/30 07:48:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) 2018/03/30 07:48:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000009500000000b2b7027b59b48740277beb76049e02ce1a11e96a220000000008000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa00000040000000000000000000000000000000000000000000000000000000000008000000eeff0000000000000000000000000000000000000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8) bind$packet(r6, &(0x7f0000000280)={0x11, 0x5, r7, 0x1, 0xf88, 0x6}, 0x14) r8 = fcntl$getown(r2, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) [ 263.180903] kernel msg: ebtables bug: please report to author: Wrong len argument [ 263.196262] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 263.322513] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x8000000000000, 0x4000000000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000000000000"]) 2018/03/30 07:48:02 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x1) 2018/03/30 07:48:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={r0, r0, 0x5, 0x3}, 0x10) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/9, 0x9}, {&(0x7f00000013c0)}], 0x8, 0x0) 2018/03/30 07:48:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000020000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000a2686510000000000000000000ff000000000000000000000000000000000100000000000000edff00000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000300)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f0000000140)="45b4796fd6b4c40383e799f89f965f1d974c2621f0f0bcee7126d39e2fb279da5b185a7cbf9f297d26b5a9cb50f1a918ad74dffff3ea4d888227eb8acde937286ba5a42fbc0eddfec18a969910960846af791cc4b739bff34df9b2a05d52414c6aa44bd838099720b8a49b8be531641c130601c21acef5e2116294f4febf2cdb7212aecdd33c1de48620672605d701b092417ea2063462cae461dd4da16e94cb9df1189c8dc7a03bdc5e75746ab8bb6243") 2018/03/30 07:48:02 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)=ANY=[@ANYBLOB="100000004e1d9c735201524140541c37"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={r0, r0, 0x5, 0x3}, 0x10) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/9, 0x9}, {&(0x7f00000013c0)}], 0x8, 0x0) 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) lseek(r0, 0x20000, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x3, 0x4, 0x9, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, 0xd7f4, 0x9}, &(0x7f0000000180)=0x90) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x2, 0x1, 0x40, 0x9, 0x40, 0x8, 0x6}, 0x0) 2018/03/30 07:48:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={r0, r0, 0x5, 0x3}, 0x10) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/9, 0x9}, {&(0x7f00000013c0)}], 0x8, 0x0) [ 263.480240] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 263.516122] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:02 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x800000, 0x4) [ 263.687269] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={r0, r0, 0x5, 0x3}, 0x10) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x91, 0x9, 0x10000, 0xc4, 0x0, 0x200, 0x8004c, 0x1, 0x4, 0x7b5d, 0x0, 0x2ebd, 0x3f, 0x1000, 0x6, 0x3, 0x5, 0x4, 0x80000001, 0x5, 0xfffffffffffffffb, 0x80, 0x1f, 0xad, 0x3ff, 0x7, 0xcdfd, 0x2, 0x3f, 0xff, 0x3, 0x80000001, 0xfffffffffffffbff, 0x91d, 0x1, 0x100000001, 0x0, 0x8, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x20481, 0x3, 0x7, 0x1, 0x100000001, 0x53, 0x8}, r1, 0xd, r0, 0x2) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, {0x1ba5, 0x8001, 0x3ff, 0x7, 0x20, 0x6}, 0x4a9aa49f}, 0xa) 2018/03/30 07:48:03 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x13, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="10000009230000df257f917961df063cb0d1c3019599617da1eaf6a2ae7666af22cb587fe4ef310e779f52bedc5c84c7889f1727c9cc0a7e38159ea52224129872ce2d34ec379287a5d87d"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177000000efc50000000000000000007e03000000000000000000c20f0000000000000000000079ad1703f0dd53b994ca1259b62d8794593eb3b6eeef8c742cd4e1b32ff486c5abbfdb70479598dff2c420d1a873a6990a18b20696926dadb459d3021987d5c48fdc13266eff75ce80a89b97b1aca2ca005d0a403811366f65399b91520f542b106dcf23"], 0x1) 2018/03/30 07:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0xc3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180080000000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000240), 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r7, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000040)={r4}) r9 = fcntl$getown(r2, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r12, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r12, 0x0, r11) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000140)={0x6, 0x1, {0x2, 0x1, 0x7, 0x1, 0xffff}}) 2018/03/30 07:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x2, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x40020000, 0xffffffffffffffff, &(0x7f0000d54ff8)='./file0\x00') r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x541000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x2}}, 0x4, 0x81}, &(0x7f0000000580)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x2, 0x820b, 0x7, 0x80000000, r4}, &(0x7f0000000600)=0x10) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = memfd_create(&(0x7f00000000c0)='port0\x00', 0x1) ioctl$TIOCEXCL(r8, 0x540c) sendmsg$key(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x128}, 0x1}, 0x1) flistxattr(r2, &(0x7f0000000700)=""/235, 0xeb) r9 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000140)={0xffffffff80000000, 0x0, 'client0\x00', 0x0, "8039ee401e3f099f", "8f17b0f991e31bbb98aaa56515676e2505eec7b811ef2152f5c8e8016d8b204b"}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[]) sysfs$2(0x2, 0x1, &(0x7f0000000800)=""/125) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) 2018/03/30 07:48:03 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x1) 2018/03/30 07:48:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2000000000000004) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/4096) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:03 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x4) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) lseek(r0, 0x0, 0x4) [ 263.905655] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 263.938961] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) [ 264.001906] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x0, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/03/30 07:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff00000000000000000000"], 0x1) 2018/03/30 07:48:03 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r0, &(0x7f0000000f80)="910e5922775a217e4b602e8eb65a8325e71b1886b909cb02693edb6cb74368b657230c40b7c76c029e964ee8be1a6904a050cff86ff21b3ced7389090000f79a58bb9921184321beca2039e0499125fc9ab5f7b08f71d689da183b4f578e0d5901333a6667c9b032e5a3ecb3b6db1c833f7569a382", 0xfffffde7, 0x47, &(0x7f00000003c0)={0x2, 0x4e22, @loopback=0x7f000001}, 0xfecd) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x80000) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000100efc5c3ff000000000000000000000000000000000000000000007e030080270de704"], 0x1) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/bnep\x00') 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/03/30 07:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r3, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r3}) r8 = fcntl$getown(r2, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) 2018/03/30 07:48:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) set_thread_area(&(0x7f0000000080)={0x4, 0x100000, 0x4000, 0x1000, 0x4, 0x7, 0x5, 0x3da, 0x4fb21700, 0x100000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) connect(r0, &(0x7f0000000000)=@generic={0x9, "8d97af0e6efc2b42f313bfa45e8de5f70fd0122e049cf92251e39adf8c1084c6a7276872f10f88f14c99efbbc8cb0108a2d95e04835cf88711501c2af69ad511c51307eb6d051826b4d782b5a708be5af1be9150d31c528c0460ed82693ee144bb235bcd4d6d736207195031e9981e0aac4291bdeec3e00823181a6ef4ac"}, 0x80) 2018/03/30 07:48:03 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 264.192574] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 264.203850] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0xfffffffffffffffc, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4) lseek(r0, 0x0, 0x4) [ 264.341375] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x0, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) sendmsg$netrom(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@full={{0x3, {"0c306bba97413d"}}, [{"71361d4b827fd0"}, {"7469bbbc0f23f5"}, {"e00b27005dd778"}, {"6cf8657b694fd9"}, {"e880a634a1bcf6"}, {"d6f01b80911f26"}, {"4fba2f12d87dcb"}, {"d557d284d99e00"}]}, 0x48, &(0x7f00000003c0)=[{&(0x7f0000000080)="60fb4d2b99bad494dda3faa12f2c80ed00a92377cc26377d6e9c66e153f4594b29f847c8c9973390e36cca8b4a3bf34669324e243c613306249f650737b226508f5813eaa2ac3a657ee0e1dfbe66455d68dc1d5e4cdbdf12bc23cf1cb94d0840dce60f3de40161fee9b31df6eb5e066fe4c18869dc8c34d52f7277ff6f1bec93e233ff80166e3a89a9738b3e86976744e7a4bd253a1dbffd479399c66b0a", 0x9e}, {&(0x7f0000000140)="06754a7f43d2e37f3eeae2d963bcf25869a179593494f98728d2fa9ea1da2efc43574590e5233b80a854498c901dda3b8e1cae57140b42a8afc73327d7d46c7be31c54c6b919e18416b802a3ab3c6a28b23b0a41b2eec24181f53851a18fa1bf1b48104014310a88183ca1aef28c0211079993f26b9eb77b3aeb9083c6153d708cefcb20c8c2445c2ce5e32e4ae21d699a0890df99dad4e31094a1478f11fa54d71ccc71030ff5989a5cc1da6abb03d7840bb8190036018e22e82ecd1ed48ce280181eaf0f399eedb8d9d022044ef83d455379", 0xd3}, {&(0x7f0000000240)="d1973e3112848342073c0ebbafc8d427cbaa38ad4c077e14debec87c38eb46249b51e96ef0c145fdda88f2cbbc968d26f4a43a097e6829cd741855d45f9a58d3ed1a4aa2f34d0e838769e6d99be18431dd932f606869b30e80446b6fc86ea397772be430dae26d2fac9b0439db1e", 0x6e}, {&(0x7f00000002c0)="f0012474da7e1c28af53afd55e55a07ce7b0b057cd1ddae690976535e2a7c4d8f32c6f8f8e39baa59b5112f6399492bfe4b30dfa8da55d6b01b0f8eba1d074fd939e1453b37fc1bf320ea3ecf63ea5da71252cddd31a85eb40955aaf70f8ab5f2bfafaf1c15bf001be23d3d1a2da998fd867c81c74fbc181f05964d2d13751d3d4cbde321c8a5efa9ec18c8ca490ead547b70d8a1ebb23165e9922358c1b4377a1617babfc9dcebf364da64109d404355ad1ced713533f303b2f4d2190228df35e00d0c94fd07fac4338f0", 0xcb}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1b0, 0x8800}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000600)=0x3) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:03 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff00000000000000000000"], 0x1) 2018/03/30 07:48:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'gretap0\x00', r4}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0x80000001, 0xfffffffffffffffb}, {0x3, 0x7f}, 0x2, 0x2, 0x8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x3f, &(0x7f00000000c0)=""/3, &(0x7f0000000140)=0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:03 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x80002) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r2 = socket$inet(0x2, 0x802, 0x10000000000000) r3 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r3, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r5 = socket(0x11, 0x100000802, 0x0) r6 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r7 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r3, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r5, r6) readv(r3, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x80000) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080)=0x100, &(0x7f0000000140)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="3df352368610000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:03 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x44500, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x2, 0x3) prctl$getname(0x10, &(0x7f0000000040)=""/48) 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tkill(r1, 0x23) lseek(r0, 0x0, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/03/30 07:48:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getegid() sendto$ipx(r0, &(0x7f0000000040)="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", 0x1000, 0x8000, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101080) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) lseek(r0, 0x0, 0x4) [ 264.524526] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 264.533767] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:03 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000100)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000000)="b7c9ed695e44c71061d4ace9935287107d9b3e36cbed51f3c5580e3d2c19319a93892949358d1860c6f06086e38144396a0e1b056c599a50a2302bc936f5b9c4419a6c63d72a5dee5df2e16df25cc642d542b8c33d5d337a41bea6873029b48b912cc2fd0afed63048aca6e4beb5120225a1b9e67ee7658066413b1d22b3fed2f0a797135a30bc03b92770e0e45da5ced50ecd0479738ac757bf2b4a8140a4506e0e5ec8e9243e5c495505f7f2aadc6c2d968d163fb3c83aac1b506d1ceed277766b53e2d5aace90ea3ab00e27f8da95b1f9c6826290cffa5a0d04ac81db17", 0xdf) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) waitid(0x2, r1, 0x0, 0x1000005, &(0x7f0000000040)) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 2018/03/30 07:48:04 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff00000000000000000000"], 0x1) [ 264.657056] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 264.723297] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="94d521d7d053ae24b6a7af", 0xb, 0xfffffffffffffff9) r2 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, r2) 2018/03/30 07:48:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x0, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 1: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000080)={0x4, 0x2, 0x100, 0x1, 0xb7a}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x58) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x100, 0x1}, 0x0, 0x9, 0x5, {0x9, 0x7}, 0x0, 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x100}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x800) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000000c0)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:04 executing program 3: r0 = socket$inet(0x2, 0x0, 0x800001) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r3, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000001000000000000000000000000ff01000000000000000000007f000000000000000000000000000000000000000000000000000000f8d4e50800000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r3}) r8 = fcntl$getown(r2, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) 2018/03/30 07:48:04 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff0000000000000000000000000000000000000000"], 0x1) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x24801, 0x0) getpeername(r0, &(0x7f0000000080)=@can, &(0x7f00000001c0)=0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000020000000000000000000000000000000000df1b"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) lseek(r0, 0x0, 0x4) openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x200000, 0x0) socketpair$inet6(0xa, 0x0, 0x7fffffff, &(0x7f0000000180)) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) 2018/03/30 07:48:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', 'selinux\x00'}) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x3c, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x5, 0x2, 0xff, 0x81, 0xbe, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xfffffffffffffffe, 0x7f, 0x93, 0x3b4, 0x4}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xfffffffffffff801, 0x5, 0x204, 0x8, 0x2, 0x2, 0xfffffffffffffff8, 0x100000000, r1}, &(0x7f0000000200)=0x20) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) lseek(r0, 0x0, 0x4) [ 264.861229] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 264.890477] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0xffffffffffffffff, 0x0) lseek(r0, 0xc, 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 264.966842] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000000000000000000000100a40700000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r4}) r8 = fcntl$getown(r3, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) 2018/03/30 07:48:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0xfffffffffffffffc, 0x0) lseek(r0, 0xffffffffbffffffd, 0x4) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x3) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xb8, 0x2a2f]) 2018/03/30 07:48:04 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff0000000000000000000000000000000000000000"], 0x1) 2018/03/30 07:48:04 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x8000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x14d5, 0x4) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x7, 0x2, 0xffffffffffff624f}, 0x5e51, 0x4, 0x8}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 2018/03/30 07:48:04 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000003c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)=ANY=[@ANYBLOB="100000003b0000022abd7000ffc1df25"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="080000005a19641b3c46f411916528ccc173024c82888f83dff8ce944f537f192bae09bd7276d7ee546a08ad6211cc8853cf364f435a73e94e9f"]) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) r2 = memfd_create(&(0x7f00000000c0)='##]trustedkeyring*vboxnet0]securitytrustedproc/]\x00', 0x2) accept4$inet(r2, &(0x7f0000000240)={0x0, 0x0, @multicast2}, &(0x7f0000000280)=0x10, 0x800) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c8503e920afffd4a0843f08a122f9622ca2095199631563a7d0"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:04 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fffc) listen$netrom(r1, 0xfffffffffffffc00) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xce) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x9) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x20}, &(0x7f0000000080)=0xffffffffffffff5a) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x0, 0x8, [0x1, 0x2, 0x8, 0x0, 0x800, 0xf7d, 0xba, 0x1]}, 0x18) lseek(r0, 0x0, 0x4) [ 265.143691] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 265.157597] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:04 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x21) 2018/03/30 07:48:04 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0xa0002, 0x0) lseek(r1, 0x0, 0x4) [ 265.241938] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 265.289546] QAT: Invalid ioctl [ 265.298515] QAT: Invalid ioctl 2018/03/30 07:48:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:04 executing program 1: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x80000000000003, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x0, 0x100000800803, 0x2) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={"6966aa47000000000032f200", 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:04 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff0000000000000000000000000000000000000000"], 0x1) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x800, 0x0) lseek(r0, 0x0, 0x2) 2018/03/30 07:48:04 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/127, 0x7f}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000001480)=""/208, 0xd0}], 0x7, 0x0) getpid() lseek(r2, 0x0, 0x4) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) rmdir(&(0x7f0000000080)='./file0\x00') dup(r0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xa0a3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='vlan0\x00') exit_group(0x101) 2018/03/30 07:48:04 executing program 6: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) [ 265.419413] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 265.419718] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80, 0x0) lseek(r0, 0x0, 0x4) write(r0, &(0x7f0000000000)="c0d0ec8a11d7e6d8f874ea1337496869ffc61a8aec9c4f88247cb085f5ba7c313fe0a4c921837c49c8c1b5b883c315621d9eb29550910ff4b5d4f7ecd56cbc4a484dab5d1c5b207792b3ce090c29", 0x4e) 2018/03/30 07:48:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={0xffffffffffffffff, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) [ 265.503093] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x100000000, 0x0, 0x1, 0x5}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x3, 0x54ca7cde}, 0x8) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xc3d, 0xa94, 0xbf, 0x4, 0x0, 0xa5ca, 0x9, 0x6, 0x20, 0x7}) ioprio_get$pid(0x2, r1) 2018/03/30 07:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) dup2(r1, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8100, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000001000000000000000000000000000000000000000000000000000000000000000000eb8300ffffffff00000000"]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={0xffffffffffffffff, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:05 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e0300"], 0x1) 2018/03/30 07:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3, 0xffffffffffffffa5, 0x2, 0x8cfb, 0x0, 0xfffffffffffffff8, 0x400, 0x4, 0x0, 0x1c5e, 0x8001, 0x7fffffff, 0x204000, 0x9, 0x7, 0xfffffffffffffffe, 0xd1, 0x5, 0xfffffffffffffff7, 0x1, 0x8b9, 0x40, 0x101, 0x7, 0x8, 0x1, 0x5, 0xffffffffffffff81, 0x2, 0x7f, 0x7, 0x100000001, 0x9, 0x5, 0x1, 0x7, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0x436}, 0x2c100, 0x8000, 0x7, 0x7, 0x4, 0x4, 0x7}, r1, 0x1, r0, 0x9) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) sendmmsg$nfc_llcp(r0, &(0x7f0000003a80)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x7, 0x5, 0x200, "d2ca1d70761581a36a228c21d96cfc59ab7dffbe7f412248dd822da0695ae0fc68f5c0d11414eaf07aa0b8acefcd91bb855ebffcf0face9be3d5da24bf9685", 0x10}, 0x60, &(0x7f0000001200)=[{&(0x7f00000000c0)="ed4ab8b05a4f8ec7a1965fbe1a339e9179a74f39619830521c9adf90f9c85a87a981e0e5c38daecda35eedec965a0a98cd1c5a3aeb2646e5af271112e2d703cd30ca16c28593b36187", 0x49}, {&(0x7f0000000140)="2c0e8fdc5fd87db02fc1eb04359cd95e630d0fff0aaff1e8eeb83af2d0191ef903eecd057a2ee382e968598ee43d412da71f9e4f5f87aea5a7ca0f461a235f838a9f9455bb7110ff1e2e9a03a894cbcad215f39d21be75a7cb1a92d44d934c4b8baaed0cafe29d1570f33c97250b7d3b383366c44c1abbc12273cd043387b030b7e79205f75073faefa25d8edff091e730c3c649099adb5feddda37041d1dd2c54cc3fe7b62993199826ed425cc213b62bd8c0cf4aba979092", 0xb9}, {&(0x7f0000000200)="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", 0x1000}], 0x3, &(0x7f0000001540)={0x1010, 0x0, 0x9, "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"}, 0x1010, 0x20000000}, {&(0x7f0000001240)={0x27, 0x1, 0x1, 0x7, 0x1, 0x5, "ea1be27441a7caf9d310dc18d4b2f91eb9f3e6769dfae82a5bb5d7f966417296c7be1d0e9f831e490982a5d95b80fb8e0dcddcb89b20ee1ee5805524db47bd", 0x2b}, 0x60, &(0x7f00000013c0)=[{&(0x7f00000012c0)="244ca57ebe9541e8b7d774e5914a3325bbf7f7", 0x13}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000001300)="c8bcfb75e85098f643c688970b58b1e29d61cfa95048296f99e2d4f1b396961344ff153466b82135af91ba79da0d2f8f453a8cc855ac69fb6338735aef89da507e3c2fbad2f1f9776360cb659b9782202938c3f3f10771743afbf0d9bb2e68e51605fcfdf9a70021e447edb411f02ea0ffa2d3398f7041bf2391e2d2828d8cb3695d7626d8bf0d6a1dc86df0d56c5c41b5a39241ec792d36b57d8e8af6408553a32ad5bb446d6d170fff13434f38429ddf68fb", 0xb3}], 0x3, &(0x7f0000001400)={0xc8, 0x119, 0x2, "611c038694f05c7640c616015c9f63ab6611984d7d078d4aaab8c49f14c7c45a82408e77a068073a3c29da4f22ffb95b753bc0a946f1347790342012f2c13ef4e226869504f0791d2df5298a7b54544bdce6b4e1348aa2dbf5235c72096537b576aeecaf23eaa3da287480320d2bf757402e60b0eda590a09467da4c616bad345c7d1d16d41cf15e8b39ef1b5dbcec27a0a448e022bfc4491ba81d19282e24ca29ba12dee22854f0f06756b47cb22e215a68ab"}, 0xc8, 0x4040010}, {&(0x7f0000003580)={0x27, 0x0, 0x0, 0x4, 0x6, 0x6, "ca6dc543d2888c1e747ef7a7ad6fa24e4858ccce99a637c2a082e783e325853a2d4da03e1eafcd923c99aae70a93f7b6164f4690a722ba063d67e9ce2fbb8c", 0x29}, 0x60, &(0x7f0000003840)=[{&(0x7f0000003600)="34864e693077ae84f377de65671376761af4ff362e192a740fddee1e7200ddc29119558d6152792201b5b15ee7f6779532ec23f4d6c4f6d5f174e9b93b6cca966ae5f77daab1e8487f01b87dd38c2b65964ae0cb7826b0f2fcb29eef5ecf512aa832170e1ce456617623c875f3997011e479f2", 0x73}, {&(0x7f0000003680)="efb7cd1994c83d3fc58dadb3536c04dc98a714e212ebe3a2c0397c7c0b5773ae8b789d195f0138886e65c5b76dadaaf2019f931a38d3cf78748b6db1fee6003df0840ce15d07aa4975cfbaf1c6442085b109bc663da73354f1b90c0118d0e632953f50c940089596107dceebcc99e9218334d54ec222659d82a32cc84be6ad663146879006b439058c89cbf49d388d31b36e5a", 0x93}, {&(0x7f0000003740)="6e9e3ca00c56cf763cf1fb716327b22a2d5bf4f20ab7fb6e982a0bea5e98e127eded31b54f15042ff8bd88c1b935875f2107741ea9d8b13573b7e4323a379b077645589f1730a80233758437fc920043a0cd4497e6aea624c281337f60ec1bd701c0ee172ac66668db5e00505be7969735ba36328e52386b0ef7f60c0ce5c2431f4392941169946835a18e7e739d383f84f549d975b02b69bb7a5d5165a1119a910e6380c5a6f3171e9b4f83a133fbf585353a25a8e7eacf15bb1c2f4f0f46d1796566369c6f5e39a766e04afb24648356cf6278bce3c613f6b30e87852fb71ff58547c532d83796a96622fc", 0xec}], 0x3, &(0x7f0000003880)={0x28, 0x112, 0x0, "cd8efd0fdcc6a9a92a03dcce1836a3ff91d8"}, 0x28, 0x1}, {&(0x7f00000038c0)={0x27, 0x1, 0x1, 0x0, 0x7, 0x3, "df931d643938ffd6ffd6ba806d4ff9fd0ec2f0749f1100c62e82db0db28693a7e1f1ff4c7fd5bc8771d6267c42124cb7f66c63ec33bcf00adfa808e0bb0e01", 0x3}, 0x60, &(0x7f0000003940), 0x0, &(0x7f0000003980)={0xc8, 0x13e, 0x9, "79735d9c48f61cb1adc7c03f5b5fe4bbede2fd5aacfc5bb05c2b7b4f8be5df5377c6f39ef1bc5881743f0cfb0c3433a10e436253b089f0ddb5ab6ed80b263a80a6e51757c36a79cfab378d60dcd5a8aad4fc69a40e0eb92af4e34fc3cb3e84fe875fdd365067f88f9cf539ee1d87a43f87249f8eb9587df3ac8ae945e5409b67c290976fce5cf990a16ab510b48e3b0060d28a0732ae2643e7f195c6d5f979dfcdb8867144b7c8ec76be201cce6318747f"}, 0xc8, 0x4000000}], 0x4, 0x20048000) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) [ 265.725878] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 265.742751] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80000000, 0x488000) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000000)="45e3bc2821bb27a1067a678767967d7a30df6e23b2bada", 0x17) 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) accept4$netrom(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) lseek(r0, 0x40000, 0x4) getpid() [ 265.831147] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/03/30 07:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20100, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x4, 0x1, 0x566c, r1}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0xff7dffffffffffff, 0x5) 2018/03/30 07:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={0xffffffffffffffff, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)) r6 = fcntl$getown(r2, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:05 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e0300"], 0x1) 2018/03/30 07:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x4) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240), 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000040)={r5}) r9 = fcntl$getown(r4, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r12, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r12, 0x0, r11) 2018/03/30 07:48:05 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = socket(0x11, 0x100000802, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r5 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r3, r4) readv(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x2500) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000300)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000240)={0x1, 0x8001}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000280)=0x1) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x8000, 0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYPTR]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x5e, 0xfffffffffffffffd) flistxattr(r0, &(0x7f0000000000)=""/85, 0x55) 2018/03/30 07:48:05 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x401, 0x5, 0x7, 0x7fffffff, 0x0, 0x2, 0x14000, 0x1, 0x1, 0xd3c, 0xff, 0x4, 0x5000, 0x2, 0xfffffffffffffffc, 0x6, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xffff, 0xffff, 0x1, 0x5, 0x3, 0x2, 0x2, 0x6, 0xd11, 0x20, 0x800, 0x3f, 0x1, 0x8, 0x5, 0x4, 0x3, 0x7fff, 0x0, 0x5, 0x2, @perf_config_ext={0x1f, 0x8001}, 0x4c01, 0x0, 0x7, 0x5, 0x0, 0x1, 0x7}, r0, 0xc, r1, 0x1) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x40}, {0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x800, [0x3, 0x6, 0x8000, 0x25, 0x1, 0xe3a]}, 0x5c) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r2, 0xa, 0x800000000000005) 2018/03/30 07:48:05 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) signalfd(r0, &(0x7f0000000100)={0x4}, 0x8) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2000, 0x0) shutdown(r1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x80, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x10, &(0x7f0000000000)="7da0ab5dfe6ff96ed4ccb5b6babfacc352a14d3b5e77b8f96dcd027225981cbb45b0d2054c20a3a998e5f5a428353a20c7bcfeb9527d016480901f08f68b8cf504971f39885584256fab6a4f70185b8097145cdf5750ce6e3cd9c4dbf21c0ac7141a40a9598434128171a0faae4cb36583292ca8739af6673aecb21dd0091242157b71403668a542f398efca", 0x8c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x100000000, 0x4) lseek(r1, 0x0, 0x0) [ 266.014005] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 266.033704] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 266.130527] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:05 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e0300"], 0x1) 2018/03/30 07:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b13d3f3c0000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r4}) r8 = fcntl$getown(r3, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) 2018/03/30 07:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200000, 0x0) lseek(r0, 0x0, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0x54d1) sched_setattr(r2, &(0x7f0000000100)={0x30, 0x3, 0x1, 0x80000001, 0xc8e9, 0x1, 0x1ff, 0x7ff}, 0x0) getdents64(r1, &(0x7f0000000180)=""/162, 0xa2) 2018/03/30 07:48:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2f6000000000000, 0x480100) write$tun(r5, &(0x7f0000000240)={@void, @void, @x25={0x2, 0x1, 0xf1, "89620fb365c79b0369bc5d10d0b99e72ce8b83532ab1f3a5910e65e0646d68d2e42c96f1152d7c68bc6dd264bdceae11dff75d63d4cada61c0bd46377a6b5f059ad7f1b1cb11274ca134def53da086d6e67887729f556ea26385553b1c85b7a1425e806192adf672ea1a017b44162936f1bf815f450c39927c4919169c92d0876cfed8fd74a1c00b89893a34e261d007c53b646d745cb7bf886085563cd9fa7f080754cdd71ce7afe99323b8c40a257d1b4784aa1d633f271225ffb702090de367db0bbed9"}}, 0xc8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) recvfrom$ipx(r0, &(0x7f0000000000)=""/157, 0x9d, 0x101, &(0x7f00000000c0)={0x4, 0x100000000, 0x6db, "48e9f75ce8a7", 0x1}, 0x10) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getcwd(&(0x7f0000000000)=""/188, 0xbc) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) lseek(r0, 0x0, 0x4) [ 266.279675] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 266.298205] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x48000, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e0300000000"], 0x1) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x4200, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x401, @loopback={0x0, 0x1}, 0x117}}, 0x1, 0x5}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={r1, 0x2}, &(0x7f0000000340)=0x8) r2 = getpid() mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x8, &(0x7f0000000100)="4e2adcc480cfdacc97193140c6c057062683d1392664d9790b87fe67b7e81488dbf5ae86bcd5e4b22292a9025686f13ba0ac6521fad45eccc8e2312934931e00c722aaa5cd4035dc055adfa5317a6c8bdee84269dbb0ec1c67666dbffe6fca202562c9f2f56327d0db26879b083cbbe5346141558ce756d2c680ba672fc502bc9e6b179db8adfddab452f0d3983692b742c5b60e9856543a10840c89a78f431cfd2a3808167d7a93ccb4a583c54e7f0ad9fd5bbd49ff46e939aeb065dcf1dd5b90939d1d875077efd9ed6b4d07af5b00376dfff0c4223681702ca7770247fba33d6157388b0695dcca9626ded0161f17f1a5c4") sched_setattr(r2, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1f, 0x661}, 0x0) lseek(r0, 0x0, 0x1) 2018/03/30 07:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 266.425437] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 266.472334] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000280)={0x0, 0x7fff}, &(0x7f00000002c0)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x121001, 0x0) getdents64(r0, &(0x7f0000000040)=""/117, 0x75) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1, 0x8001, 0x9}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800080093aedab29f813beb6d19a5ab1900000000000000000000007f7bba010000000000000000000000debe0100001f0000000000000000000704244321ebf5568701000000001f9c000000000000000000006ad6eb909841880cf81ebd51af0d4d4fb6795328bab2951d92482c6b10c4caa1fcff5ab6fdd11b05429f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a050783b3c7ed3e9398000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:05 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0xffffffffffffff42) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)='/selinux/enforce\x00', &(0x7f00000000c0)=')\\&]\x00', &(0x7f0000000100)='eth1keyring#system\x00', &(0x7f0000000140)='/selinux/enforce\x00', &(0x7f0000000180)='/selinux/enforce\x00', &(0x7f00000001c0)='-/\x00', &(0x7f0000000200)='/selinux/enforce\x00', &(0x7f0000000240)='/selinux/enforce\x00', &(0x7f0000000280)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f0000000340)='/selinux/enforce\x00', &(0x7f0000000380)='/selinux/enforce\x00', &(0x7f00000003c0)='/selinux/enforce\x00', &(0x7f0000000400)='/selinux/enforce\x00', &(0x7f0000000440)='/selinux/enforce\x00', &(0x7f0000000480)='/selinux/enforce\x00'], 0x400) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) lseek(r0, 0x0, 0x4) [ 266.637044] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 266.709544] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e0300000000"], 0x1) 2018/03/30 07:48:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) pwritev(r0, &(0x7f0000001200)=[{}, {&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="b356c5a5e951658dde5a24e4b628482da72ac45c0f0156a2b942203a3464beee49b0b50e71c134ceed46ae5ce6881c7d37eabe50e8862fdbbce81d14b5143660b54726b370b6316c96a7740acb558446e131c1b2800c2ef7626e77c96b489c00ab2c1e6ce51ea784cc772bef9a4968f4f084cbe2a09f093a8420fe0fcfc5ecb21fc965b86f8a529dee438f0b9465b34f213292b677a82bebc631b78f2ac6f5fd", 0xa0}, {&(0x7f0000001100)="7d1e969098c3f93ada54a026a3ad622b51a3eb7fbd6c0c1d9a395b0b787dd3fda3c0a79d0a0bb4f71b544d252c6e9ff6c0fba399404f24fad8ccd0154bd23277abf087cfcbf119d36b475ba1ba212e497c43bfa3e79e3a6ef39fa70ece52820320c58116673e34f5b8f75479a25ad91e29bfc6eca5db6a9c41100209576816bf93f31cda502d97ef92d4f967028cdeab7c654f34ae95d0ac664981d4a58713f1238af2a31a8bfa53d07d7c7729007a63e596177f0a1dbe95e2b287f336889aeaab4f204381de44587c8fbe0cdeb13e48101d02d6f59c7b930747618b408b95cdf99db2cec0a0", 0xe6}], 0x4, 0x0) 2018/03/30 07:48:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x8001, 0x6, 0xce, 0x8, 0x0, 0x9431, 0x200, 0x2, 0x2d, 0x10001, 0x3, 0xe98c, 0x3f, 0x6, 0xd2d, 0x800, 0x7fff, 0x7, 0xff, 0x10200000, 0x3, 0x10000, 0x4, 0x5, 0x2f, 0x8, 0x9, 0xce7, 0x8000, 0x9, 0x100000000, 0x8, 0x4, 0x101, 0x80000000, 0x9, 0x0, 0x792a, 0x4, @perf_config_ext={0x9}, 0x18002, 0x8, 0xd8d, 0x7, 0x3f, 0x4, 0x8000}, r6, 0xa, r2, 0xb) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8000, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800001ba3e52bd252d2eded65"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r3, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) sched_setscheduler(r8, 0x6, &(0x7f0000000140)=0x1000) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r3}) r9 = fcntl$getown(r2, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r12, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r12, 0x0, r11) 2018/03/30 07:48:06 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000f80)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x82040) openat$kvm(0xffffffffffffff9c, &(0x7f0000001340)='/dev/kvm\x00', 0x8000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000001300)={0x5, &(0x7f0000000040)=""/47, &(0x7f0000001280)=[{0xfffffffffffffeff, 0x1000, 0x2, &(0x7f0000000080)=""/4096}, {0x3, 0xa6, 0x800, &(0x7f0000001080)=""/166}, {0x9, 0x2, 0x7ff, &(0x7f0000001140)=""/2}, {0x8, 0xb2, 0x2, &(0x7f0000001180)=""/178}, {0x7f8, 0x7, 0x6, &(0x7f0000001240)=""/7}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x1000000000000, 0x6) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x4000, 0x0) lseek(r0, 0x0, 0x4) ioctl$KVM_NMI(r0, 0xae9a) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x24, 0x0, 0x10001, 0xba8c}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffff9c, 0xc0106438, &(0x7f0000000040)={0xff, r1}) [ 266.864902] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 266.873247] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20000, 0x0) lseek(r0, 0x0, 0x4) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 2018/03/30 07:48:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x5) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 2018/03/30 07:48:06 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e0300000000"], 0x1) 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/100, &(0x7f0000000080)=0x64) accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 267.008107] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40044084}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r3, 0x210, 0x70bd2b, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffff}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigqueueinfo(r4, 0x0, &(0x7f0000000080)={0xfffffffffffffffb, 0x3, 0xfffffffffffffffe}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="40000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:06 executing program 5: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 267.062962] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x2) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e030000000000"], 0x1) 2018/03/30 07:48:06 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r2, &(0x7f0000ce6ff0)={0x2, 0x8000000004e20, @loopback=0x7f000001}, 0xfffffffffffffe8b) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x2000) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xffe3, &(0x7f00000003c0)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x0) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0x399, @remote={0xfe, 0x80, [], 0xbb}, 0x1000}, @in={0x2, 0x4e22, @multicast1=0xe0000001}], 0x4c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x3f, {{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x1, 0x5, [{{0x2, 0x4e20, @multicast2=0xe0000002}}, {{0x2, 0x4e23, @multicast2=0xe0000002}}, {{0x2, 0x4e22}}, {{0x2, 0x4e21, @loopback=0x7f000001}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}]}, 0x310) iopl(0x3ff) 2018/03/30 07:48:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xffffffff, 0x408000) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0xa4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000240)=0x30) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000000000000004000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) mkdir(&(0x7f000082f000)='./control\x00', 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x60) write$sndseq(r5, &(0x7f0000000080), 0xc5) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r5, r6) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)) 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x4, 0x0, 0xffffffff, 0x7, 0x8, 0x9}, 0x80000000}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e24, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}}, 0x84) 2018/03/30 07:48:06 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000001080)='/dev/adsp#\x00', 0xffffffffffffffff, 0x10000020000) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/4096) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x3) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) lseek(r0, 0x0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000000)=""/55, 0x37}, &(0x7f0000000040), 0x40}, 0x20) [ 267.305544] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 267.322867] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x2, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x10001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r1, @in={{0x2, 0x46, @multicast2=0xe0000002}}, [0x0, 0x2, 0x1, 0x200, 0xe5, 0x3, 0x7, 0x0, 0x4, 0x0, 0x8, 0x8000, 0x3, 0x7f, 0x1000]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xfff, 0xffffffffffffff01}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x1a92fb1e, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0x2a, 0x9c6}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r2, 0x6b, "8322a278f06c229ff192d4a2e8d3e80b23fe57281d21bcd7dda57a6a74e0be83592b19476225647bc3eb115b96c648c58600e23bdfa520ef1e2cba43c9ebfb1f89c22fd00f1e73ff2fc105d6e78f842d5704234c35d2cd3a45c2c7c2b0e6bff2928cfb79da3fd1d3a032bf"}, &(0x7f0000000100)=0x73) 2018/03/30 07:48:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e20, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, {{0xa, 0x4e20, 0xd7, @empty, 0x1}}}, 0x108) lseek(r0, 0x7, 0x7) [ 267.445606] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:06 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e030000000000"], 0x1) 2018/03/30 07:48:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="911af06d000000fbe000002100004083d7"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x9, 0x0, 0x7, 0x9, "954517b1cd8a02a6089d90b01155623667bb88adc97a471a80eb6fb986be49ee8e3062341ea21b709314d681", 0x1}, 0x8, [0x80000000, 0x1, 0x7, 0x3ff, 0x80000000, 0x7, 0x7, 0x8, 0xf313, 0x1, 0x4, 0xffffffff7fffffff, 0x1ff, 0x8, 0x400, 0xfffffffffffffff8, 0x9, 0x7f, 0x1800000000, 0x80000001, 0x5, 0x3, 0x10001, 0xffffffff, 0x8000, 0x9, 0xa2e6, 0x5, 0x5, 0x33, 0x5, 0x1, 0x3000, 0x487b, 0x1, 0x7f, 0x3, 0x4, 0x51a, 0x2d1c3650, 0x0, 0x9, 0x9, 0xfffffffffffffffe, 0x9, 0x6, 0x8, 0xfffffffffffffffe, 0x40, 0x7, 0x80000000, 0x2e070a9c, 0xfff, 0x7ff, 0x5, 0x9, 0xff, 0x4feb, 0xfb, 0x8, 0xca, 0x6, 0x8, 0x0, 0x2, 0x100, 0x1, 0x37c7, 0x659b, 0x5, 0x3ff, 0x0, 0x4, 0x1, 0x746e, 0x9, 0x2, 0x888, 0x2, 0x2, 0x100000000, 0x4, 0x8001, 0x4, 0x7fffffff, 0x7, 0x9, 0x8, 0x9833, 0x400, 0xd1e7, 0x19, 0x1f, 0x9, 0x9, 0x100000, 0xfffffffffffffffb, 0x2aa, 0x4, 0x5, 0x0, 0xffffffff, 0x7f, 0x0, 0x7, 0xffffffffffff8000, 0x8, 0x80000000, 0x6, 0x9, 0x80, 0x1, 0x800, 0x89b, 0x5, 0x9, 0x10000, 0x3, 0x1000, 0xfffffffffffffffa, 0x3, 0x401, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x7, 0x10001], {r1, r2+30000000}}) 2018/03/30 07:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240), 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000040)={r5}) r9 = fcntl$getown(r4, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r12, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r12, 0x0, r11) 2018/03/30 07:48:06 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x3002, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x8000, 0x0) lseek(r1, 0x2, 0x1) 2018/03/30 07:48:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:06 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="10000000230000022abde5a83985e063ea17537000ffdbdf25cf9662adbd71ea3b0da7231f2110de1cfe2ecacb9ec66903322c92b558f0ecd9e157b1e04673547da05d5548c367a4658906dc2354edbef6ab7500b06f5316a905e55561364a8d6260c55c0c342466ab14d5546b93380fe477a507086fbf9abaf86cfe02d963c7a19bf11c83a849205b96bdd1"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:06 executing program 6: r0 = timerfd_create(0x0, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000640)={0x0, 0x80000, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x454, 0x29, 0x400, 0x70bd28, 0x25dfdbfe, {0x3}, [@typed={0x8, 0x23, @str='{\x00'}, @nested={0x2c0, 0x86, [@typed={0x8, 0x50, @fd=r3}, @generic="3a910c395125034f224fb9bb7f2ff68e76e95bfa09eba0ee2f0b298a6d1129cb6f02b22b24d2abd4ce3c39fb7556f8a0de88a535aa8134ce0f622137e4243ddcd85ae3533fa3d8ff35cc6aa3ee736c7c72acad160624de8ee15440358823ae5c04ddc7210ff1f95e145cff6a6d1fd8a49a79a93d132cd64682c9379fa39a487b2754599fe223fa1ec5baa68fb6215a6d3ec54097d30fff8f09e0f1936dde22a85d3819ac3fc49fffa4cc3e95028bb07e86a8ae56fe9da6113dc5f48b2615039fbbd504cdb341ee27a728b467204384a8ec", @generic="ed", @typed={0x8, 0x1e, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="fd7d79b9dada38298bc3992897a17d8a1e7f687512cfd9007935099ff9b716f5d5bd0c16d37cce1e341112fe5754db60b928d4ada1423b14c22c500f2a288bf8b42379e65ade98a9bb93463831166b935776dd934e7a747cbb5b9727f496f65c7b8dab3332bed4c359787f843676ab435027d86e509c23c07cf429", @generic="d9cb2d5de8f365ffb7f0a390f142e12cf6ea7a2148ff3cb501397ecd794824d60b700c4adfb5a1414f66e08e2e7a1c34c7d550ea73869fee358148d9c33d9fe5c2e45821fb47a11e7194acf6237c2f3e3d0baadc415658b4a235fe0da8e2e450e9a35c8228ea8b7c32ffcb6b3b6ec8fe3197fab8a77bfdb5ece6a8992dcbaa7cc3b0f8f9821a8b771dfdaa87d5a31d3af72f490e4a5403d46c5c81ac7340ac19e11ccac2e1dba7f448b91eb9744a650cbcfd4289188896fa5b3e187e61d700dea87102a112616fe327a7b186ae5ca3045b7368", @generic="9a", @typed={0x8, 0x41, @ipv4=@rand_addr=0x5}, @typed={0x8, 0x28, @ipv4=@loopback=0x7f000001}, @generic="816224c987338b7de20f219c4d07b13c4f8979fe729fbe727938735980624ac3262866d494542fc2192dfd026cac9cf89da6451bab10833d727942d041c4b4931541f561e96f50b188177252b7f90d22b8a42a165e9f2301ebebc736a91b586e916e271f252f00c5d5e17e472a8c431bd2cbec334fb7c8fe35"]}, @typed={0x8, 0x1e, @fd=r3}, @generic="fefc366a0fd5b6432585f09a9bcb751b7ba68d38504f2517ba89f18fcd911a1b80fdef3ef5b3c5c6982f48f54e0ff30379389b17affff12b9f89ca21c07f81b9310eaeaae08a4e05c892020f3d5a77bea284f27f9ea55ba8cbff21038eae6576f645fe04667734d87f59f1e100fcdcd3b678796ce213f1c67ebce7369cab24701acb191124d67964408a378d79f8465551bf8ff50d79f028686a6524371b41aeb4819eca489e820b5bffe6a00fc1b22cfdeb5560652e19d73ff46f7b3a94961f8c3f990aa0376638202f21c174271fbe33aa", @generic="a8c8623d5d4a91137ab38160a0f515759c0a83e786cb79628d1fdc20a356c6245f742076be3c1bcb28e851f147cbafb09f9dc6f9f7ae2c4e37960f38df8a64e42c0a7e19767064203bb9ab9cc3805175ef35e7fb13abecd66fb08cb02cf412ba24f203d2420c8a4ba7c39539774643f99350dacefb0cf20b4cfbb4b9fd7aea19a8887f9cc24aa98b3a0f63a54a1e204a49221f59c3f9a41e1a258374"]}, 0x454}, 0x1, 0x0, 0x0, 0x804}, 0x4000040) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000006c0)=0x44) lseek(r3, 0x0, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={r1, 0x80000, r2}) fcntl$dupfd(r3, 0x406, r3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x0, 0x0) 2018/03/30 07:48:06 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) setresuid(r0, r1, r2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:07 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1004) [ 267.626873] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 267.647356] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="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") 2018/03/30 07:48:07 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) accept$inet(r0, 0x0, &(0x7f0000000040)) r1 = fcntl$getown(r0, 0x9) ptrace$getsig(0x4202, r1, 0x7ff, &(0x7f0000000000)) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:07 executing program 7: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e030000000000"], 0x1) 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4003, 0x0) write(r0, &(0x7f0000000000)="955104c42f89c775a4638812849b58a0f8c75e0fbafe528c195d8e392e85b5c92f", 0x21) r1 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffff8) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="78128b65da42c0651da6a5afa23737bc22d076e80de3b5038d1503375cdc0bcf0e482baec7d738f0216eb4d36f5d1ceb97ab98487402f1b2390dbfe9cee992c16270599cffe6a51ef044e135e0e4bc68aa112895ce805e96c15d9fd9b5f9a0779f5c1471a2c84e2e457e94097035ec5dae677ff1d2fcfa2a501f0234a4fd3f18f223ba6912acdb6e5bea7f5301764728f52ca32497f4f507aab57d0395555346c54d02676320f2db08aa4d82b392547f7fa5ff9e07ca97478f67fe3cca0674653075c067835328541d5ec54ef9cf245890819eb94997842628e4c2b14e65fc0264932e627d", 0xe5, r1) keyctl$search(0xa, r1, &(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, r2) lseek(r0, 0x0, 0x6) [ 267.793933] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 267.861922] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r2 = socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x714e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='rose0\x00') r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) getpeername$ipx(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 2018/03/30 07:48:07 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) 2018/03/30 07:48:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:07 executing program 7 (fault-call:15 fault-nth:0): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x40104, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000090100000000000000000099744aaa78b5ed35f96f273b8005cfdcb7199d928225f4e64d60a6d6bb7de412ac40aba17067e918bf2c0dd4c2b56504ef0ee86c32a4c033bd591ac590c27adb93aa8e1144fc4094cd3de3093d6eefd34d2de1ad6a60fe7ee92f605a397e0708cf94bbc5c4fa111487a49150637f103b8c3674d95ba373e38f42125a6a8b64f60e111b7fcd87beb236f28c25d2c76d4966038d8106539c9d13edc15bca471a20605b66f522426d6b11c26a0f77c875ae18046be7f9bd86af585aa0c68729e59a88"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:07 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="00000b00000000000000000000000600000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000004000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000040000000000000005d7346089e0"]}, 0x106) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)=ANY=[@ANYBLOB="10000000230000022abd6300ffdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:07 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="590f38a38e38a7e6c1c1f7fdb79c2517a1d11b9a7a7edaddac88af47871f0b8d568d82d30cfc9fb152850e7259e5b0361ea40ef9be9b5f8c946edfc20bb41d3b3e1c95a247cc1efab0ef6789bfcfebae058d") socket$inet6_dccp(0xa, 0x6, 0x0) 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x3, 0x5, 0x80000000, 0x6, 0x1, 0x7f}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) 2018/03/30 07:48:07 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xfffffffffffffff8, 0x8000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000080)=""/22, 0x16}, &(0x7f0000000100), 0x2}, 0x20) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) accept(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f00000003c0)=0x3be) [ 267.986836] kernel msg: ebtables bug: please report to author: Wrong len argument [ 268.010303] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 268.070845] FAULT_INJECTION: forcing a failure. [ 268.070845] name failslab, interval 1, probability 0, space 0, times 0 [ 268.082259] CPU: 1 PID: 1017 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 268.089533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.098868] Call Trace: [ 268.101441] dump_stack+0x194/0x24d [ 268.105055] ? arch_local_irq_restore+0x53/0x53 [ 268.109703] ? alloc_set_pte+0xefd/0x1590 [ 268.113853] should_fail+0x8c0/0xa40 [ 268.117552] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.122637] ? reacquire_held_locks+0x1f9/0x3e0 [ 268.127283] ? alloc_set_pte+0xefd/0x1590 [ 268.131429] ? find_held_lock+0x35/0x1d0 [ 268.135477] ? __lock_is_held+0xb6/0x140 [ 268.139535] ? check_same_owner+0x320/0x320 [ 268.143836] ? __might_sleep+0x95/0x190 [ 268.147789] ? rcu_note_context_switch+0x710/0x710 [ 268.152697] ? rtnl_lock+0x17/0x20 [ 268.156225] should_failslab+0xec/0x120 [ 268.160183] kmem_cache_alloc_node_trace+0x5a/0x760 [ 268.165178] ? perf_trace_lock+0xd6/0x900 [ 268.169307] ? mutex_lock_io_nested+0x1900/0x1900 [ 268.174139] __kmalloc_node+0x33/0x70 [ 268.177924] kvmalloc_node+0x64/0xd0 [ 268.181621] alloc_netdev_mqs+0x16d/0xfb0 [ 268.185753] ? tun_set_headroom+0x60/0x60 [ 268.189883] ? free_netdev+0x400/0x400 [ 268.193749] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 268.199020] ? perf_trace_lock+0xd6/0x900 [ 268.203156] ? find_held_lock+0x35/0x1d0 [ 268.207204] ? tun_get+0x1ab/0x2e0 [ 268.210725] ? lock_downgrade+0x980/0x980 [ 268.214855] ? lock_release+0xa40/0xa40 [ 268.218811] ? __lock_is_held+0xb6/0x140 [ 268.222858] ? cap_capable+0x1b5/0x230 [ 268.226733] ? security_capable+0x8e/0xc0 [ 268.230866] ? ns_capable_common+0xcf/0x160 [ 268.235172] __tun_chr_ioctl+0x1686/0x4100 [ 268.239392] ? find_held_lock+0x35/0x1d0 [ 268.243440] ? tun_poll_controller+0x4c0/0x4c0 [ 268.248005] ? __fget+0x342/0x5b0 [ 268.251439] ? lock_downgrade+0x980/0x980 [ 268.255562] ? find_held_lock+0x35/0x1d0 [ 268.259602] ? lock_release+0xa40/0xa40 [ 268.263559] ? __lock_is_held+0xb6/0x140 [ 268.267614] ? __fget+0x36b/0x5b0 [ 268.271045] ? handle_mm_fault+0x35b/0xb10 [ 268.275272] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 268.280100] ? tun_chr_compat_ioctl+0x30/0x30 [ 268.284572] tun_chr_ioctl+0x2a/0x40 [ 268.288262] ? tun_chr_ioctl+0x2a/0x40 [ 268.292133] do_vfs_ioctl+0x1b1/0x1520 [ 268.296006] ? ioctl_preallocate+0x2b0/0x2b0 [ 268.300397] ? fget_raw+0x20/0x20 [ 268.303834] ? __sb_end_write+0xa0/0xd0 [ 268.307794] ? fput+0xd2/0x140 [ 268.310963] ? SyS_write+0x184/0x220 [ 268.314662] ? security_file_ioctl+0x89/0xb0 [ 268.319054] SyS_ioctl+0x8f/0xc0 [ 268.322404] ? do_vfs_ioctl+0x1520/0x1520 [ 268.326539] do_syscall_64+0x281/0x940 [ 268.330403] ? __do_page_fault+0xc90/0xc90 [ 268.334616] ? _raw_spin_unlock_irq+0x27/0x70 [ 268.339089] ? finish_task_switch+0x1c1/0x7e0 [ 268.343562] ? syscall_return_slowpath+0x550/0x550 [ 268.348469] ? syscall_return_slowpath+0x2ac/0x550 [ 268.353377] ? prepare_exit_to_usermode+0x350/0x350 [ 268.358378] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 268.363728] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x4000, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)) lseek(r0, 0xfffffffffffffffe, 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0xffffffff) fcntl$setown(r0, 0x8, r1) [ 268.368556] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.373722] RIP: 0033:0x4548b9 [ 268.376888] RSP: 002b:00007fab512fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.384574] RAX: ffffffffffffffda RBX: 00007fab512fb6d4 RCX: 00000000004548b9 [ 268.392874] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 268.400135] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 268.407382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 268.414625] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000000 2018/03/30 07:48:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r3, 0x6}, &(0x7f0000000240)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)={[{0x7f, 0x9, 0x1000, 0xf0c, 0x8, 0xec, 0xec4f, 0x8f, 0x7, 0x0, 0x7, 0xfb8, 0x4}, {0xcfc, 0x1, 0x5, 0x7, 0x46, 0x4, 0x7, 0x2, 0xcfc, 0x76, 0xffffffffffffff14, 0x7, 0x5}, {0x2, 0x400, 0x1800000, 0x4, 0x8000, 0x42680efd, 0x7, 0x0, 0x800, 0x3f, 0x4c67, 0x0, 0x1f}], 0x8}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sync_file_range(r6, 0x240000, 0x3, 0x3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:07 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={r1, 0x80000, r0}) lseek(r0, 0x0, 0x4) fanotify_mark(r0, 0x29, 0x2, r0, &(0x7f0000000000)='./file0\x00') ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000180)="73e515a9bbd7d41d2dac83f07b37c4dd398933fadecb0dabcf811d9a354f68429f04b0dec74ce6a59aa65a1f915f6fc5b7") sendto$ax25(r0, &(0x7f0000000040)="03b11eded133cdf291a42108f1025a542dadbef30122df39f59b3782e3684c04888f9e16cd96c6ab286e6246e62a84817ad0adcaaef7da91eac993a680fe6375eb632e142d003b7da29d25e391a3f2142107e4602cd9bf55a84b33d2cd0626f45bc0d921a7ec50d35f1e9061a97a1732ec49e4d9dddb57d93b544cb5ca4e042575f17d212eabf24e8a84f85ea5585cf053372a35e6c5e6d3767699e679701c8c68db095d0fbe41c0c80f48673d7888c8689f758c4348b7cef5c2fd0da1292b6d130f1d8cbaf073e045a73325b84710e7905f8db54b6f91957a2711f27687cceb9facda4b", 0xe4, 0x80, &(0x7f0000000140)={0x3, {"15127458eaf3ee"}, 0xc9b7}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) 2018/03/30 07:48:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x7) [ 268.472089] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:08 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x2, 0x800}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1800000000000000, 0x30, 0xba, 0xff}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x12, 0x80000001, 0x8002, 0x401, 0xffffffffffffff3e, 0x4, 0x4, 0x3f, r1}, &(0x7f0000000100)=0x20) 2018/03/30 07:48:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x2040) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:08 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]}, 0x1bb) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0xa9}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="b37b4059230b0000022abd7000ffdbdf6ae88d5acf4d53f685e2906bfdad25d4054b9c5840834c81b35dfa275f5eaba9117c200b34f95929cc01557b5eb3c99a3e45ba28c132c63c47e916f1df6bec85f491e02da7f5c2808af84609d12addab31a042383eee97887ed78cf437c6ba5c29fe648cc9b169f744e8001d4bdd6ad45f46a978c51763c05585bcfb2350bc3eeab59ed3033ed38846930b85cd1b3c8c3d62a49c361a31f5e84583c3ec36467d26c3c98026de0264"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000012c0)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xff72}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xfffffffffffffc4) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d00000088de74e35e9f7395b787fbe000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:08 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x3) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x87, @broadcast=0xffffffff, 0x4e23, 0x0, 'none\x00', 0x4, 0x7, 0x5b}, {@broadcast=0xffffffff, 0x4e21, 0x10007, 0xff, 0x0, 0x80}}, 0x44) 2018/03/30 07:48:08 executing program 7 (fault-call:15 fault-nth:1): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:08 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x1, 0x0) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:08 executing program 5: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) 2018/03/30 07:48:08 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x7f, 0x3, 0x80000001}, 0x5, 0x0, 0x7c}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000080)="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", 0x1000) lseek(r0, 0x200000000, 0x4) 2018/03/30 07:48:08 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) pread64(r0, &(0x7f0000000000)=""/131, 0x83, 0x43) [ 268.677152] kernel msg: ebtables bug: please report to author: Wrong len argument [ 268.687188] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 268.729344] FAULT_INJECTION: forcing a failure. [ 268.729344] name failslab, interval 1, probability 0, space 0, times 0 [ 268.740649] CPU: 0 PID: 1080 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 268.747917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.757253] Call Trace: [ 268.759832] dump_stack+0x194/0x24d [ 268.763443] ? arch_local_irq_restore+0x53/0x53 [ 268.768110] should_fail+0x8c0/0xa40 [ 268.771803] ? trace_hardirqs_off+0x10/0x10 [ 268.776110] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.781196] ? pcpu_next_fit_region.constprop.27+0x2a7/0x3a0 [ 268.786983] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 268.791809] ? trace_hardirqs_off+0x10/0x10 [ 268.796109] ? wait_for_completion+0x770/0x770 [ 268.800669] ? lock_downgrade+0x980/0x980 [ 268.804792] ? kernel_text_address+0x102/0x140 [ 268.809356] ? find_next_zero_bit+0xe3/0x110 [ 268.813755] ? __lock_is_held+0xb6/0x140 [ 268.817820] should_failslab+0xec/0x120 [ 268.821774] kmem_cache_alloc_trace+0x4b/0x740 [ 268.826351] __hw_addr_create_ex+0xaa/0x3c0 [ 268.830653] ? dev_mc_init+0x160/0x160 [ 268.834527] ? __lock_is_held+0xb6/0x140 [ 268.838575] __hw_addr_add_ex+0xfc/0x270 [ 268.842627] dev_addr_init+0x167/0x260 [ 268.846494] ? __hw_addr_add_ex+0x270/0x270 [ 268.850813] ? perf_trace_lock+0xd6/0x900 [ 268.854938] ? kasan_unpoison_shadow+0x35/0x50 [ 268.859497] ? kasan_kmalloc+0xad/0xe0 [ 268.863369] ? __kmalloc_node+0x47/0x70 [ 268.867331] alloc_netdev_mqs+0x21b/0xfb0 [ 268.871458] ? tun_set_headroom+0x60/0x60 [ 268.875591] ? free_netdev+0x400/0x400 [ 268.879457] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 268.884626] ? perf_trace_lock+0xd6/0x900 [ 268.888764] ? find_held_lock+0x35/0x1d0 [ 268.892818] ? tun_get+0x1ab/0x2e0 [ 268.896340] ? lock_downgrade+0x980/0x980 [ 268.900469] ? lock_release+0xa40/0xa40 [ 268.904427] ? __lock_is_held+0xb6/0x140 [ 268.908477] ? cap_capable+0x1b5/0x230 [ 268.912351] ? security_capable+0x8e/0xc0 [ 268.916485] ? ns_capable_common+0xcf/0x160 [ 268.920791] __tun_chr_ioctl+0x1686/0x4100 [ 268.925023] ? find_held_lock+0x35/0x1d0 [ 268.929067] ? tun_poll_controller+0x4c0/0x4c0 [ 268.933646] ? __fget+0x342/0x5b0 [ 268.937340] ? lock_downgrade+0x980/0x980 [ 268.941466] ? find_held_lock+0x35/0x1d0 [ 268.945520] ? lock_release+0xa40/0xa40 [ 268.949478] ? __lock_is_held+0xb6/0x140 [ 268.953534] ? __fget+0x36b/0x5b0 [ 268.956964] ? handle_mm_fault+0x35b/0xb10 [ 268.961192] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 268.966028] ? tun_chr_compat_ioctl+0x30/0x30 [ 268.970499] tun_chr_ioctl+0x2a/0x40 [ 268.974190] ? tun_chr_ioctl+0x2a/0x40 [ 268.978060] do_vfs_ioctl+0x1b1/0x1520 [ 268.981933] ? ioctl_preallocate+0x2b0/0x2b0 [ 268.986323] ? fget_raw+0x20/0x20 [ 268.989761] ? __sb_end_write+0xa0/0xd0 [ 268.993721] ? fput+0xd2/0x140 [ 268.996891] ? SyS_write+0x184/0x220 [ 269.000587] ? security_file_ioctl+0x89/0xb0 [ 269.004980] SyS_ioctl+0x8f/0xc0 [ 269.008325] ? do_vfs_ioctl+0x1520/0x1520 [ 269.012454] do_syscall_64+0x281/0x940 [ 269.016319] ? __do_page_fault+0xc90/0xc90 [ 269.020533] ? _raw_spin_unlock_irq+0x27/0x70 [ 269.025009] ? finish_task_switch+0x1c1/0x7e0 [ 269.029486] ? syscall_return_slowpath+0x550/0x550 [ 269.034394] ? syscall_return_slowpath+0x2ac/0x550 [ 269.039306] ? prepare_exit_to_usermode+0x350/0x350 [ 269.044305] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 269.049656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.054489] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.059657] RIP: 0033:0x4548b9 [ 269.062822] RSP: 002b:00007fab512d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.070508] RAX: ffffffffffffffda RBX: 00007fab512da6d4 RCX: 00000000004548b9 2018/03/30 07:48:08 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x9, 0x4) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:08 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000)) lseek(r0, 0x0, 0x4) [ 269.077756] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 269.085005] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 269.092257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 269.099502] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000001 [ 269.165846] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:08 executing program 7 (fault-call:15 fault-nth:2): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:08 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379732f6e65742f697076342f760300000000000000786969726174696f6e00", 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, {0x6, 0x10000, 0x80000000, 0x5, 0x9, 0x2}, 0x7, 0x3ff}, 0xe) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:08 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x48201, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d4083011877f9"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:08 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x1, 0xe}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setns(r3, 0x8000000) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000003e057e33000000000000006611cd38b9293a4c35e8234248fb9ab440f8befaa2f0de4fe2861d992ef753b7a6633d6730534667370c482e185c33b1ce0f4f8af161ae11a296d876e786ec58a23a2a036694a5fa94d56c740af6d41df6cda1c950858c2e7c962afe62ed54b541f3bb67b5a69af0f54353a112084319bc93a480baaccc60812a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={0xffffffffffffffff, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001900000000000000000000007f00020100d600467b94cdde4aed5a3480fc851d0000000000000000000000ff01000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097a0b53f1e67ac04d4b201231d1cb26f371bb910d576143f826075d66c6bfad4cd0e348b75e9a7dcf5b7ce2124"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)) r8 = fcntl$getown(r2, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) 2018/03/30 07:48:08 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x1, 0x0) lseek(r0, 0x0, 0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={r1, 0x8, &(0x7f0000000040)=[0x4, 0x4c8, 0x4, 0x400, 0x1, 0xa2, 0x8, 0x1], &(0x7f0000000080)=[0x3, 0x1, 0x1, 0x1, 0x1b7, 0x57], 0x40, 0x6, 0x2, &(0x7f00000000c0)=[0x6, 0x0, 0x1a2c, 0x1, 0x6, 0x0], &(0x7f0000000100)=[0x5, 0xd3e, 0x80000001]}) 2018/03/30 07:48:08 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="636dbd7fd3efbde5a11c306a61b94c7befead497b1179e8ca719f09ce3974c436fed8785745d1c8ba2ad89ef60a355d7c99ed243284dba7b0599f0693616330c02007fc5091ba0223611f65b383d6c172b48dd6d3149bad5898fe0a94d8db41b81900936163a76206adf3f3b1c8f4188480c41d9b96befd8420de565a0a5ad94c357dc9298ab8cbfbadc013eeee88e3814384cec99544a6d3af22c158cef43527b4eb2b2e44c180462b5c139bd4d19f2e3877b66402ad54092f4b59e0f65e67100de14d7e7706fb3c623240417e25ff9019345358d92f7e90d196c626e8699098156b0afedc7") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:08 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dummy0\x00', 0x1}, 0x18) 2018/03/30 07:48:08 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) listen$netrom(r0, 0x1f) lseek(r0, 0x0, 0x4) [ 269.360463] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 269.378215] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 269.423506] FAULT_INJECTION: forcing a failure. [ 269.423506] name failslab, interval 1, probability 0, space 0, times 0 [ 269.434828] CPU: 1 PID: 1134 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 269.442101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.451446] Call Trace: [ 269.454028] dump_stack+0x194/0x24d [ 269.457643] ? arch_local_irq_restore+0x53/0x53 [ 269.462300] ? print_irqtrace_events+0x270/0x270 [ 269.467050] should_fail+0x8c0/0xa40 [ 269.470750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 269.475837] ? __lock_is_held+0xb6/0x140 [ 269.479894] ? find_held_lock+0x35/0x1d0 [ 269.483942] ? __lock_is_held+0xb6/0x140 [ 269.488002] ? check_same_owner+0x320/0x320 [ 269.492310] ? rcu_note_context_switch+0x710/0x710 [ 269.497229] should_failslab+0xec/0x120 [ 269.501183] kmem_cache_alloc_node_trace+0x5a/0x760 [ 269.506177] ? __hw_addr_add_ex+0x270/0x270 [ 269.510474] ? perf_trace_lock+0xd6/0x900 [ 269.514601] ? kasan_unpoison_shadow+0x35/0x50 [ 269.519171] __kmalloc_node+0x33/0x70 [ 269.522955] kvmalloc_node+0x99/0xd0 [ 269.526649] alloc_netdev_mqs+0x80d/0xfb0 [ 269.530783] ? free_netdev+0x400/0x400 [ 269.534648] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 269.539816] ? perf_trace_lock+0xd6/0x900 [ 269.543949] ? find_held_lock+0x35/0x1d0 [ 269.548006] ? lock_downgrade+0x980/0x980 [ 269.552143] ? lock_release+0xa40/0xa40 [ 269.556101] ? __lock_is_held+0xb6/0x140 [ 269.560149] ? cap_capable+0x1b5/0x230 [ 269.564030] ? security_capable+0x8e/0xc0 [ 269.568164] ? ns_capable_common+0xcf/0x160 [ 269.572474] __tun_chr_ioctl+0x1686/0x4100 [ 269.576690] ? find_held_lock+0x35/0x1d0 [ 269.580734] ? tun_poll_controller+0x4c0/0x4c0 [ 269.585298] ? __fget+0x342/0x5b0 [ 269.588730] ? lock_downgrade+0x980/0x980 [ 269.592854] ? find_held_lock+0x35/0x1d0 [ 269.596895] ? lock_release+0xa40/0xa40 [ 269.600852] ? __lock_is_held+0xb6/0x140 [ 269.604910] ? __fget+0x36b/0x5b0 [ 269.608342] ? handle_mm_fault+0x35b/0xb10 [ 269.612573] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 269.617400] ? tun_chr_compat_ioctl+0x30/0x30 [ 269.621871] tun_chr_ioctl+0x2a/0x40 [ 269.625560] ? tun_chr_ioctl+0x2a/0x40 [ 269.629430] do_vfs_ioctl+0x1b1/0x1520 [ 269.633303] ? ioctl_preallocate+0x2b0/0x2b0 [ 269.637693] ? fget_raw+0x20/0x20 [ 269.641131] ? __sb_end_write+0xa0/0xd0 [ 269.645088] ? fput+0xd2/0x140 [ 269.648264] ? SyS_write+0x184/0x220 [ 269.651960] ? security_file_ioctl+0x89/0xb0 [ 269.656353] SyS_ioctl+0x8f/0xc0 [ 269.659696] ? do_vfs_ioctl+0x1520/0x1520 [ 269.663828] do_syscall_64+0x281/0x940 [ 269.667692] ? __do_page_fault+0xc90/0xc90 [ 269.671908] ? _raw_spin_unlock_irq+0x27/0x70 [ 269.676385] ? finish_task_switch+0x1c1/0x7e0 [ 269.680860] ? syscall_return_slowpath+0x550/0x550 [ 269.685769] ? syscall_return_slowpath+0x2ac/0x550 [ 269.690680] ? prepare_exit_to_usermode+0x350/0x350 [ 269.695675] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 269.701031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.705860] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.711029] RIP: 0033:0x4548b9 [ 269.714196] RSP: 002b:00007fab512d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/03/30 07:48:09 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) listen(r0, 0x9) listen(r0, 0xffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, r1, 0x0, r2) 2018/03/30 07:48:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000761000)='pagemap\x00') setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) sendto$inet(r1, &(0x7f0000a5dfe5), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) sendfile(r1, r2, &(0x7f0000af5000), 0x10001) getgid() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) r4 = geteuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r5) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) lseek(r0, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) [ 269.721879] RAX: ffffffffffffffda RBX: 00007fab512da6d4 RCX: 00000000004548b9 [ 269.729127] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 269.736372] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 269.743629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 269.750878] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000002 2018/03/30 07:48:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 269.817563] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:09 executing program 7 (fault-call:15 fault-nth:3): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:09 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5471, 0xc30, 0x819f}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x5}, &(0x7f00000000c0)=0x8) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:09 executing program 5: r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) lseek(r0, 0x200000000, 0x9) 2018/03/30 07:48:09 executing program 3: r0 = socket$inet(0x2, 0x0, 0x882) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0xffffff92) r3 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="380000000080001000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r2, r4}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xdaf}}, 0x200, 0x0, 0x1ff, 0xfffffffffffffbff, 0xd9b}, &(0x7f0000000180)=0x98) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f00000100000000000000000000001eff010000000000000000000000000001000000001ab381910000100008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r2}) r8 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x81, 0x101100) r9 = fcntl$getown(r8, 0x9) r10 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r9, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x1fffd, 0x0) r12 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r1, &(0x7f0000ec6000)=""/50, 0x394) fcntl$dupfd(r12, 0x0, r11) 2018/03/30 07:48:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r6, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r9 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r9, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r9, 0x0, r8) 2018/03/30 07:48:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x40, 0x0) lseek(r0, 0x0, 0x4) [ 270.013167] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 270.026502] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 270.079647] FAULT_INJECTION: forcing a failure. [ 270.079647] name failslab, interval 1, probability 0, space 0, times 0 [ 270.090930] CPU: 1 PID: 1175 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 270.098201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.107563] Call Trace: [ 270.110136] dump_stack+0x194/0x24d [ 270.113749] ? arch_local_irq_restore+0x53/0x53 [ 270.118413] should_fail+0x8c0/0xa40 [ 270.122112] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.127215] ? save_stack+0xa3/0xd0 [ 270.130828] ? find_held_lock+0x35/0x1d0 [ 270.134877] ? __lock_is_held+0xb6/0x140 [ 270.138935] ? check_same_owner+0x320/0x320 [ 270.143241] ? rcu_note_context_switch+0x710/0x710 [ 270.148160] should_failslab+0xec/0x120 [ 270.152118] kmem_cache_alloc_node_trace+0x5a/0x760 [ 270.157110] ? mark_held_locks+0xaf/0x100 [ 270.161239] ? __raw_spin_lock_init+0x1c/0x100 [ 270.165808] __kmalloc_node+0x33/0x70 [ 270.169588] kvmalloc_node+0x99/0xd0 [ 270.173286] alloc_netdev_mqs+0x9ae/0xfb0 [ 270.177417] ? free_netdev+0x400/0x400 [ 270.181286] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 270.186466] ? perf_trace_lock+0xd6/0x900 [ 270.190603] ? find_held_lock+0x35/0x1d0 [ 270.194660] ? lock_downgrade+0x980/0x980 [ 270.198791] ? lock_release+0xa40/0xa40 [ 270.202751] ? __lock_is_held+0xb6/0x140 [ 270.206800] ? cap_capable+0x1b5/0x230 [ 270.210673] ? security_capable+0x8e/0xc0 [ 270.214805] ? ns_capable_common+0xcf/0x160 [ 270.219110] __tun_chr_ioctl+0x1686/0x4100 [ 270.223330] ? find_held_lock+0x35/0x1d0 [ 270.227375] ? tun_poll_controller+0x4c0/0x4c0 [ 270.231939] ? __fget+0x342/0x5b0 [ 270.235371] ? lock_downgrade+0x980/0x980 [ 270.239498] ? find_held_lock+0x35/0x1d0 [ 270.243539] ? lock_release+0xa40/0xa40 [ 270.247495] ? __lock_is_held+0xb6/0x140 [ 270.251552] ? __fget+0x36b/0x5b0 [ 270.254984] ? handle_mm_fault+0x35b/0xb10 [ 270.259220] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 270.264051] ? tun_chr_compat_ioctl+0x30/0x30 [ 270.268524] tun_chr_ioctl+0x2a/0x40 [ 270.272214] ? tun_chr_ioctl+0x2a/0x40 [ 270.276081] do_vfs_ioctl+0x1b1/0x1520 [ 270.279953] ? ioctl_preallocate+0x2b0/0x2b0 [ 270.284341] ? fget_raw+0x20/0x20 [ 270.287778] ? __sb_end_write+0xa0/0xd0 [ 270.291736] ? fput+0xd2/0x140 [ 270.294910] ? SyS_write+0x184/0x220 [ 270.298611] ? security_file_ioctl+0x89/0xb0 [ 270.303006] SyS_ioctl+0x8f/0xc0 [ 270.306357] ? do_vfs_ioctl+0x1520/0x1520 [ 270.310488] do_syscall_64+0x281/0x940 [ 270.314349] ? __do_page_fault+0xc90/0xc90 [ 270.318565] ? _raw_spin_unlock_irq+0x27/0x70 [ 270.323041] ? finish_task_switch+0x1c1/0x7e0 [ 270.327609] ? syscall_return_slowpath+0x550/0x550 [ 270.332529] ? syscall_return_slowpath+0x2ac/0x550 [ 270.337440] ? prepare_exit_to_usermode+0x350/0x350 [ 270.342437] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 270.347785] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.352616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.357783] RIP: 0033:0x4548b9 [ 270.360947] RSP: 002b:00007fab512fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.368634] RAX: ffffffffffffffda RBX: 00007fab512fb6d4 RCX: 00000000004548b9 [ 270.375879] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 270.383125] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 270.390371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 270.398204] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000003 [ 270.447954] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:09 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpeername$packet(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001c80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001cc0)={'erspan0\x00', r2}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)={&(0x7f0000001680)='./file0\x00', 0x0, 0x18}, 0x10) r3 = syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') getsockopt$sock_buf(r3, 0x1, 0x3f, &(0x7f0000001540)=""/18, &(0x7f0000001580)=0x12) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0xfff}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)="fba314dbd2ed51b7b4a29f3b94f1eb6984d61c1d3c9a3cbca38ae177352209e6a7d3306b4c06dc35803df0b14fcce1941d349d3b843710f5b036a36cdfadd0daa7503298d16137ae01e35db6ec6b9c6e597d179eeffa3fb5874b913550d0f21de32b1aca1868c79d73fef18a4ac9ef3e49cb899a58c6b6912c4de1ed0c44be6ebcc4e1681b87c3c96a704e0bd053b1ad3c989315a3d6d444", 0x98}, {&(0x7f00000001c0)="773b5b75352a37069f31362628caea0402145cfd75c5bd", 0x17}, {&(0x7f0000000200)="1b6634d3d1ee07bfec3779236dcab0426c980b9f941a9a10cd6545efe7a0945d1002c2572f88b08c334bc25b9d93ba149e4dc3b28fb7b1d16052d83362710e69b494fc052977bea5c904592eecd41ba810b896b92864c35f41d2535244458f666bb86485fd44745d7b3cd3", 0x6b}, {&(0x7f0000000280)="f7bdeb54692934900710c4d4a44aaff929fa4e7f1effeb284e859fa572888a2ead0f1724b6eb773bcaf1c998217dbd35c1185011aca849a81eb5a981daf1837fcd527fabe32587d2ad7159aba1b23f79b7ecad707bc8568eb552cf58ad09f4362881d7efb883d6791f0e379a4993c3509142ecf67ea3b8edd218a98a49d60da7e827f6fcd4029176d94e60b737a9907c341f261fdce605ed62c4c595fd7cb6f3158c1761a0e1078de0246fa06113120d2426c53e758a5c0e164abfb80192a8a017487ab411582d8904a6da9608bdade54dda1ca4", 0xd4}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="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", 0x1000}], 0x6, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xd8}, 0x41) lseek(r0, 0x0, 0x3) 2018/03/30 07:48:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0x800, @loopback={0x0, 0x1}, 0x3b}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="78000000f81c16a639028e4ee5da399a0d77d7e01887fbde521c20cff91040c41f856bf948c2a5b9b118469fbc7d718ef7b997ba8ae32814bc23faa5382fbb72661cfd667adf63f576d821567c03908c366caccb5084aa1809ea960f78b4fac607a3905ad4c9c73977b018aef67496bc7b1e818edfc7fb3947cc"], &(0x7f00000001c0)=0x80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r2, 0x0, 0x5) 2018/03/30 07:48:09 executing program 7 (fault-call:15 fault-nth:4): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="f80000003100000327bd7000ffdbdf250300000008004000ff070000080087007f000001fa7aea6fe41e2e072db9fb39aaea1e0380bb59085fca825ef498de6dd4d2eb0574f57ab19f701bb8effecce0967e4d35d740a60c92d7a9974cbbb83a9202b6811266541fbe49cc44e69d94ef73f6c144cebced83bd8ce23fa9cbaa9f309100219b6c09b65f21deff15006187db4e3cf56f60e1182f9ac96bcf1b9ffd5636b0d73c8c52a25c9ce67280cb2b75eaa618d439258fffc7a215f8a64d6627693a328cde24d3c841fb5ccc62f2e00b0f29b7cc29a6c5231e55f02a7f4a7ce70127a8e09fc378aa2e5dfb048329d60ea00d3d1c5e0e4574ddd064d077e76b3f68975d2e7651009bdee96fe47b1aaf6218f621d6bcccab76b2c660275985bd62ea08f33f97298e3ce1fdc2cb1fa89077d1d4305e7bce79df99acc9c1dbb3acb51bb998651e665e62d223f9be09450e153ac73265a97b0f1b25c2b3b4da2318930e20964462a810f7000000000000000000000000"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) connect$ipx(r6, &(0x7f0000000080)={0x4, 0x3, 0x8, "1e89e200bc0c", 0x9}, 0x10) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x20800) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:09 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000bfd64707900848a45ff3fe49ec76fed20000000000060047e07537893a000000000000513dffffffff000000000000000000000000000000000000000000000000000000000000000000000000"]}, 0x106) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2=0xe0000002}, 0xfffffd47) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:09 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2400, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000240)=@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="e122cba64be7a867596a86754b6447a02e4451178f266e8d214f6bee5671fffee7e05d805510e3da1c2ae4e0d60d7467b684ad0a8038f42a5d54d590c71f8a0317157093bf2faa86a096758722e6fb1cbfa4b1a127f5ff0ef0005a9fb3ef79b930f5c619cc457d6c55f0aa584d265a9b8cb99e41de1b1408f9db061f7118bdb95f9ce6393bb229f8392cf9fab1a2c5b2570cd47e2738f70375e7855fbb748986465c911645f19ff89d6ab670498426", 0xaf}, {&(0x7f00000004c0)="d2798001102776dcf097f8054a97140420c5dd47ee385d9c9994b70ef335613b2aeb55b2de390feae616c5bedce10b232b929d4270d19a1c9d17945a64575c271804fbda2b2ab58b51a021820356aa39b5469c23f3ff2cb3698c9afff047a68526f4e08f62ff2a049328507bd4bc4164332e6c94ab2dfeb8cafa3b9617ba408645fd1ac2efbe4d53b101df1dc6e14b1adefbe44a36fc6dfa3334e566100ddb1c12bec4b1ea89595840b473fa9ce9e2e2bcbcd518c79645162de7a4b2e3e62314d560d5cf1333c6dc16f84d6629", 0xcd}], 0x2, 0x0, 0x0, 0x4}, 0x20000000) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={"6d61020000000000000001000000004000000000000030700071d7daba4000"}, &(0x7f00000000c0)=0x54) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x1, 0x7ff, 0x4, 0x5, 0x0, 0x2, 0x312a, 0x8, 0xffffffff, 0x5, 0xffffffffffffff81, 0x7, 0x6, 0xfffffffffffff3f5, 0x7f]}, &(0x7f0000000200)=0x100) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r2, 0x1, 0x90, 0x721e894f, 0x100000000, 0x81}, 0x14) getdents64(r1, &(0x7f00000002c0)=""/15, 0xf) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000300)=0x100000001, 0x4) lseek(r1, 0x0, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x810, r1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000280)={0xed82, 0x6c, 0x7fff, 0x3a5}, 0x8) 2018/03/30 07:48:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x1aaa, 0x4) getpeername$netrom(r0, &(0x7f0000000000)=@full, &(0x7f0000000080)=0x48) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x5000, 0x4, 0xff, 0x10000}, {0xfffffffffffffff8, 0x3f, 0x80, 0x8}, {0x80, 0x4, 0x1ff, 0x8}, {0x2, 0x80000000000000, 0x9, 0x5}, {0x77, 0x3, 0x6, 0x5}, {0x6, 0x7ff, 0xfffffffffffffffc, 0x5}, {0xfffffffffffffff7, 0x8, 0x1}, {0x7, 0x8, 0x100, 0x1}, {0x3, 0x0, 0x101, 0xc5}]}) [ 270.569332] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 270.609906] FAULT_INJECTION: forcing a failure. [ 270.609906] name failslab, interval 1, probability 0, space 0, times 0 [ 270.621332] CPU: 0 PID: 1223 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 270.628706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.638059] Call Trace: [ 270.640653] dump_stack+0x194/0x24d [ 270.644296] ? arch_local_irq_restore+0x53/0x53 [ 270.645627] kernel msg: ebtables bug: please report to author: Wrong len argument [ 270.648964] ? trace_event_raw_event_lock+0x340/0x340 [ 270.649000] should_fail+0x8c0/0xa40 [ 270.649022] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.649036] ? debug_object_activate+0x307/0x730 [ 270.649057] ? lock_release+0xa40/0xa40 [ 270.679327] ? find_held_lock+0x35/0x1d0 [ 270.683399] ? __lock_is_held+0xb6/0x140 [ 270.687490] ? check_same_owner+0x320/0x320 [ 270.691821] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 270.696945] ? rcu_note_context_switch+0x710/0x710 [ 270.701862] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 270.706892] should_failslab+0xec/0x120 [ 270.710854] kmem_cache_alloc_node_trace+0x5a/0x760 [ 270.715857] ? mark_held_locks+0xaf/0x100 [ 270.720025] __kmalloc_node+0x33/0x70 [ 270.723839] kvmalloc_node+0x64/0xd0 [ 270.727554] tun_attach+0xc7d/0x1220 [ 270.731256] ? tun_show_owner+0x160/0x160 [ 270.735385] ? lockdep_init_map+0x9/0x10 [ 270.739423] ? init_timer_key+0x163/0x3f0 [ 270.743555] ? init_timer_on_stack_key+0xe0/0xe0 [ 270.748291] ? round_jiffies_up+0xce/0x100 [ 270.752507] ? __round_jiffies_up_relative+0x150/0x150 [ 270.757776] __tun_chr_ioctl+0x2095/0x4100 [ 270.762019] ? tun_poll_controller+0x4c0/0x4c0 [ 270.766585] ? __fget+0x342/0x5b0 [ 270.770023] ? lock_downgrade+0x980/0x980 [ 270.774150] ? find_held_lock+0x35/0x1d0 [ 270.778192] ? lock_release+0xa40/0xa40 [ 270.782148] ? __lock_is_held+0xb6/0x140 [ 270.786207] ? __fget+0x36b/0x5b0 [ 270.789636] ? handle_mm_fault+0x35b/0xb10 [ 270.793870] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 270.798776] ? tun_chr_compat_ioctl+0x30/0x30 [ 270.803249] tun_chr_ioctl+0x2a/0x40 [ 270.806941] ? tun_chr_ioctl+0x2a/0x40 [ 270.810810] do_vfs_ioctl+0x1b1/0x1520 [ 270.814689] ? ioctl_preallocate+0x2b0/0x2b0 [ 270.819079] ? fget_raw+0x20/0x20 [ 270.822515] ? __sb_end_write+0xa0/0xd0 [ 270.826478] ? fput+0xd2/0x140 [ 270.829652] ? SyS_write+0x184/0x220 [ 270.833441] ? security_file_ioctl+0x89/0xb0 [ 270.837832] SyS_ioctl+0x8f/0xc0 [ 270.841178] ? do_vfs_ioctl+0x1520/0x1520 [ 270.845306] do_syscall_64+0x281/0x940 [ 270.849187] ? __do_page_fault+0xc90/0xc90 [ 270.853399] ? _raw_spin_unlock_irq+0x27/0x70 [ 270.857877] ? finish_task_switch+0x1c1/0x7e0 [ 270.862355] ? syscall_return_slowpath+0x550/0x550 [ 270.867276] ? syscall_return_slowpath+0x2ac/0x550 [ 270.872187] ? prepare_exit_to_usermode+0x350/0x350 [ 270.877184] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 270.882539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.887370] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.892539] RIP: 0033:0x4548b9 [ 270.895708] RSP: 002b:00007fab512d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.903397] RAX: ffffffffffffffda RBX: 00007fab512da6d4 RCX: 00000000004548b9 [ 270.910649] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 270.917897] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 270.925146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 270.932395] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000004 [ 270.995537] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:48:10 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x180) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/99) 2018/03/30 07:48:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:10 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:10 executing program 7 (fault-call:15 fault-nth:5): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) r6 = gettid() ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x7, 0x3, 0x8, 0x7664, 0x0, 0x1f, 0x0, 0x4, 0x4, 0x80000000, 0xf760, 0x7, 0xcea, 0x1, 0x0, 0x7ff, 0x6, 0x0, 0x0, 0x6, 0x6, 0x3, 0x39, 0x7, 0x7f, 0x1, 0x4, 0xffffffffffffffff, 0x380000, 0xd85, 0x0, 0x3, 0x9, 0x2, 0x5, 0x800, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0xd}, 0xc00, 0x80000000, 0x2, 0x0, 0x2, 0xff, 0x7fffffff}, r6, 0x1, r2, 0x0) 2018/03/30 07:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80002) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:10 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000003c0)=0x4) r1 = socket$inet(0x2, 0x7fe, 0xffffffffffffc) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r5 = socket(0x11, 0x100000802, 0x0) r6 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) r7 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r7, r3) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0xfffffdbc}, {&(0x7f0000000c80)=""/205, 0xb2}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:10 executing program 5: r0 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="440dbcff02b1252d252381c875e32d29429dc3d32405bf7283c20acba632e57f30e3a45d2fbd20242dce45aefed03635f53a0b37a1a8e585ab76c8ec715d1f4771f4c1ae30d3eb6645ad0fc568b8330f97fc2cbb3294c7c882b5f5f7662cc2cd28df82bbb81763635055185215dafcb26b7ed9a4a027d8112462fd1f1e502515bd0b90a6678f7f78c10f1cc5bdc919ddba8fc5", 0x93, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000140)=""/31, 0x1f) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) r2 = getpid() ioprio_set$pid(0x3, r2, 0x7) lseek(r1, 0x0, 0x4) 2018/03/30 07:48:10 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x200, 0x0) lseek(r0, 0x0, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x4402, 0x0) syz_open_procfs(0x0, &(0x7f000072d000)='smaps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x14, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0xa, 0x802, 0xff, &(0x7f00000010c0)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) read(r3, &(0x7f000066b000)=""/1, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[]}, 0x1}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000e5afe8)={0xaa}) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001100)=""/245) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_netrom_TIOCINQ(r5, 0x541b, &(0x7f0000000200)) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000400)={@loopback}, &(0x7f00000015c0)=0x14) r7 = semget(0x0, 0x3, 0x100) semctl$GETPID(r7, 0x7, 0xb, &(0x7f00000000c0)=""/4096) [ 271.122428] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:10 executing program 6: lseek(0xffffffffffffffff, 0x0, 0x4) [ 271.179144] FAULT_INJECTION: forcing a failure. [ 271.179144] name failslab, interval 1, probability 0, space 0, times 0 [ 271.190462] CPU: 0 PID: 1269 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 271.197743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.207106] Call Trace: [ 271.209702] dump_stack+0x194/0x24d [ 271.213345] ? arch_local_irq_restore+0x53/0x53 [ 271.218018] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 271.223064] should_fail+0x8c0/0xa40 2018/03/30 07:48:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) [ 271.226795] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.231910] ? mark_held_locks+0xaf/0x100 [ 271.236062] ? __raw_spin_lock_init+0x1c/0x100 [ 271.240662] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 271.245688] ? find_held_lock+0x35/0x1d0 [ 271.249754] ? __lock_is_held+0xb6/0x140 [ 271.253837] ? check_same_owner+0x320/0x320 [ 271.258154] ? pm_runtime_init+0x418/0x500 [ 271.262394] ? rcu_note_context_switch+0x710/0x710 [ 271.267341] should_failslab+0xec/0x120 [ 271.271318] __kmalloc_track_caller+0x5f/0x760 2018/03/30 07:48:10 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@mcast1={0xff, 0x1, [], 0x1}, 0x2e, r1}) r2 = gettid() fcntl$setown(r0, 0x8, r2) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x76, 0x1f, "8b6bc4ecb6b82ec074face5e707c3a03b9c8989429933fa40c294f3f7444e0996defc158f9d26d607af77d12c753d67ea6655c73fefa5cad7917fac5a8ab5e65aa4aa45a8c2edbc716bc9077bcca624e5176228ea84374e469baa2f15a91e3ac308fe77159bf3e4f27797925a10b"}, &(0x7f0000000140), 0x8000000400) lseek(r0, 0x0, 0x4) [ 271.275900] ? _raw_spin_unlock_bh+0x30/0x40 [ 271.280311] ? lockdep_init_map+0x9/0x10 [ 271.284372] ? kstrdup_const+0x39/0x50 [ 271.288273] kstrdup+0x39/0x70 [ 271.291471] kstrdup_const+0x39/0x50 [ 271.295189] kvasprintf_const+0x10e/0x160 [ 271.299347] kobject_set_name_vargs+0x5b/0x140 [ 271.303942] dev_set_name+0xb4/0xf0 [ 271.307569] ? device_initialize+0x5b0/0x5b0 [ 271.311975] ? __raw_spin_lock_init+0x1c/0x100 [ 271.316557] ? rtnl_is_locked+0x54/0xb0 [ 271.320552] netdev_register_kobject+0xc3/0x360 [ 271.325230] register_netdevice+0xb41/0x1020 2018/03/30 07:48:10 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2080, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/4, 0x4, 0x120, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) lseek(r0, 0x800000000000000, 0x4) [ 271.329652] ? netdev_change_features+0x100/0x100 [ 271.334587] ? round_jiffies_up+0xce/0x100 [ 271.338837] ? __round_jiffies_up_relative+0x150/0x150 [ 271.344139] __tun_chr_ioctl+0x20d7/0x4100 [ 271.348405] ? tun_poll_controller+0x4c0/0x4c0 [ 271.352991] ? __fget+0x342/0x5b0 [ 271.356446] ? lock_downgrade+0x980/0x980 [ 271.360602] ? find_held_lock+0x35/0x1d0 [ 271.364670] ? lock_release+0xa40/0xa40 [ 271.368653] ? __lock_is_held+0xb6/0x140 [ 271.372738] ? __fget+0x36b/0x5b0 [ 271.376188] ? handle_mm_fault+0x35b/0xb10 [ 271.380440] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 271.385273] ? tun_chr_compat_ioctl+0x30/0x30 [ 271.389746] tun_chr_ioctl+0x2a/0x40 [ 271.393441] ? tun_chr_ioctl+0x2a/0x40 [ 271.397311] do_vfs_ioctl+0x1b1/0x1520 [ 271.401185] ? ioctl_preallocate+0x2b0/0x2b0 [ 271.405573] ? fget_raw+0x20/0x20 [ 271.409015] ? __sb_end_write+0xa0/0xd0 [ 271.412976] ? fput+0xd2/0x140 [ 271.416149] ? SyS_write+0x184/0x220 [ 271.419847] ? security_file_ioctl+0x89/0xb0 [ 271.424239] SyS_ioctl+0x8f/0xc0 [ 271.427585] ? do_vfs_ioctl+0x1520/0x1520 [ 271.431715] do_syscall_64+0x281/0x940 [ 271.435577] ? __do_page_fault+0xc90/0xc90 [ 271.439791] ? _raw_spin_unlock_irq+0x27/0x70 [ 271.444267] ? finish_task_switch+0x1c1/0x7e0 [ 271.448742] ? syscall_return_slowpath+0x550/0x550 [ 271.453650] ? syscall_return_slowpath+0x2ac/0x550 [ 271.458559] ? prepare_exit_to_usermode+0x350/0x350 [ 271.463554] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 271.468905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.473738] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.478905] RIP: 0033:0x4548b9 [ 271.482070] RSP: 002b:00007fab512d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.489756] RAX: ffffffffffffffda RBX: 00007fab512da6d4 RCX: 00000000004548b9 [ 271.497006] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 271.504260] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 271.511509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 271.518755] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000005 2018/03/30 07:48:10 executing program 7 (fault-call:15 fault-nth:6): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe00083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:11 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402080, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/111, &(0x7f00000000c0)=0x6f) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) 2018/03/30 07:48:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x410881, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x408, 0x0, 0x2}]}) 2018/03/30 07:48:11 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:11 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x7f, 0x4d2c, 0xffffffff, {0x77359400}, 0x4, 0x2}) [ 271.666500] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 271.710505] FAULT_INJECTION: forcing a failure. [ 271.710505] name failslab, interval 1, probability 0, space 0, times 0 [ 271.721915] CPU: 1 PID: 1333 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 271.729195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.738549] Call Trace: [ 271.741128] dump_stack+0x194/0x24d [ 271.744827] ? arch_local_irq_restore+0x53/0x53 [ 271.749494] should_fail+0x8c0/0xa40 [ 271.753195] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.758276] ? kasan_kmalloc+0xad/0xe0 [ 271.762152] ? kstrdup+0x39/0x70 [ 271.765496] ? kstrdup_const+0x39/0x50 [ 271.769359] ? kvasprintf_const+0x10e/0x160 [ 271.773657] ? kobject_set_name_vargs+0x5b/0x140 [ 271.778389] ? dev_set_name+0xb4/0xf0 [ 271.782171] ? tun_chr_ioctl+0x2a/0x40 [ 271.786039] ? do_vfs_ioctl+0x1b1/0x1520 [ 271.790077] ? SyS_ioctl+0x8f/0xc0 [ 271.793596] ? do_syscall_64+0x281/0x940 [ 271.797635] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.802988] ? find_held_lock+0x35/0x1d0 [ 271.807042] ? __lock_is_held+0xb6/0x140 [ 271.811103] ? check_same_owner+0x320/0x320 [ 271.815401] ? trace_hardirqs_off+0x10/0x10 [ 271.819702] ? rcu_note_context_switch+0x710/0x710 [ 271.824622] should_failslab+0xec/0x120 [ 271.828589] kmem_cache_alloc_trace+0x4b/0x740 [ 271.833149] ? __lock_is_held+0xb6/0x140 [ 271.837201] device_private_init+0x98/0x230 [ 271.841506] ? virtual_device_parent+0x60/0x60 [ 271.846068] ? kfree+0x1f6/0x260 [ 271.849424] device_add+0x8dc/0x1650 [ 271.853113] ? dev_set_name+0xb4/0xf0 [ 271.856893] ? device_initialize+0x5b0/0x5b0 [ 271.861285] ? device_private_init+0x230/0x230 [ 271.865848] ? rtnl_is_locked+0x54/0xb0 [ 271.869813] netdev_register_kobject+0x183/0x360 [ 271.874552] register_netdevice+0xb41/0x1020 [ 271.878944] ? netdev_change_features+0x100/0x100 [ 271.883767] ? round_jiffies_up+0xce/0x100 [ 271.887979] ? __round_jiffies_up_relative+0x150/0x150 [ 271.893247] __tun_chr_ioctl+0x20d7/0x4100 [ 271.897472] ? tun_poll_controller+0x4c0/0x4c0 [ 271.902038] ? __fget+0x342/0x5b0 [ 271.905474] ? lock_downgrade+0x980/0x980 [ 271.909598] ? find_held_lock+0x35/0x1d0 [ 271.913640] ? lock_release+0xa40/0xa40 [ 271.917599] ? __lock_is_held+0xb6/0x140 [ 271.921656] ? __fget+0x36b/0x5b0 [ 271.925088] ? handle_mm_fault+0x35b/0xb10 [ 271.929317] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 271.934148] ? tun_chr_compat_ioctl+0x30/0x30 [ 271.938618] tun_chr_ioctl+0x2a/0x40 [ 271.942308] ? tun_chr_ioctl+0x2a/0x40 [ 271.946178] do_vfs_ioctl+0x1b1/0x1520 [ 271.950055] ? ioctl_preallocate+0x2b0/0x2b0 [ 271.954443] ? fget_raw+0x20/0x20 [ 271.957888] ? __sb_end_write+0xa0/0xd0 [ 271.961849] ? fput+0xd2/0x140 [ 271.965029] ? SyS_write+0x184/0x220 [ 271.968729] ? security_file_ioctl+0x89/0xb0 [ 271.973122] SyS_ioctl+0x8f/0xc0 [ 271.976468] ? do_vfs_ioctl+0x1520/0x1520 [ 271.980596] do_syscall_64+0x281/0x940 [ 271.984461] ? __do_page_fault+0xc90/0xc90 [ 271.988671] ? _raw_spin_unlock_irq+0x27/0x70 [ 271.993145] ? finish_task_switch+0x1c1/0x7e0 [ 271.997620] ? syscall_return_slowpath+0x550/0x550 [ 272.002527] ? syscall_return_slowpath+0x2ac/0x550 [ 272.007438] ? prepare_exit_to_usermode+0x350/0x350 [ 272.012432] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 272.017783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.022614] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.027779] RIP: 0033:0x4548b9 [ 272.030944] RSP: 002b:00007fab512d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.038642] RAX: ffffffffffffffda RBX: 00007fab512da6d4 RCX: 00000000004548b9 [ 272.045889] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 272.053146] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 2018/03/30 07:48:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x9) 2018/03/30 07:48:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000027a30000000000000000000000000000000000000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r4}) r8 = fcntl$getown(r2, 0x9) r9 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r8, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r11 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r11, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r11, 0x0, r10) [ 272.060392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 272.067649] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000006 [ 272.085500] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:11 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/18, &(0x7f0000000040)=0x12) 2018/03/30 07:48:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0) lseek(r0, 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 272.214555] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:11 executing program 7 (fault-call:15 fault-nth:7): r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$kcm(0x29, 0x69416bc71349206e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0xffff, 0xffffffff, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x8}, 'port0\x00', 0xea, 0x0, 0x3f}) 2018/03/30 07:48:11 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) lseek(r0, 0x0, 0x4) 2018/03/30 07:48:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x101000, 0x0) lseek(r0, 0xffffffffffffffff, 0x4) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x3, 0x10001, 0x3, 0xe5b}, 0x3, 0x5, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0x0, 0x9, 0xff}) 2018/03/30 07:48:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:11 executing program 3: r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x10000000000000) r2 = socket(0x2, 0x803, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0xfffffffffffffe0c) sendto$inet(r2, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000099504f89007f50d3a553eed1cc8d125b00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000440efa3417846e7172dda2626c0340b1713e046cc30d0f24aed624a94debc39d"]}, 0x138) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = socket(0x11, 0x100000802, 0x0) r5 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f00000003c0)=[{0x7, 0x1, 0x10001, 0x4}, {0x6, 0x3, 0x9, 0x8}, {0x4, 0x2, 0x1, 0x7fffffff}, {0x40, 0x7fff, 0x9}, {0xca97, 0x401, 0x401, 0x3a1500000000000}, {0x7ff, 0x3, 0xfa73, 0x1}]}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x4004) r6 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in6=@loopback, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000f40)={0x10, 0x23, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) dup2(r4, r5) readv(r2, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0x9) epoll_create1(0x1) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="726177000000efc5c3ff000000000000000000000000000000000000000000007e03000000000000"], 0x1) 2018/03/30 07:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900000000000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r10, &(0x7f0000ec6000)=""/50, 0x32) fcntl$dupfd(r10, 0x0, r9) 2018/03/30 07:48:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x0, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) lseek(r0, 0x3, 0x4) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e) 2018/03/30 07:48:11 executing program 6 (fault-call:13 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r3}) r7 = fcntl$getown(r2, 0x9) r8 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r7, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffd, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$dupfd(r10, 0x0, r9) [ 272.446153] kernel msg: ebtables bug: please report to author: Wrong len argument [ 272.460885] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/03/30 07:48:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xfffffffffffffffe, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x408000, 0x1c) lseek(r0, 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 272.518463] kernel msg: ebtables bug: please report to author: Wrong len argument [ 272.518778] FAULT_INJECTION: forcing a failure. [ 272.518778] name failslab, interval 1, probability 0, space 0, times 0 [ 272.537539] CPU: 1 PID: 1375 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 272.544821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.554192] Call Trace: [ 272.556142] FAULT_INJECTION: forcing a failure. [ 272.556142] name failslab, interval 1, probability 0, space 0, times 0 [ 272.556791] dump_stack+0x194/0x24d [ 272.556810] ? arch_local_irq_restore+0x53/0x53 [ 272.556840] should_fail+0x8c0/0xa40 [ 272.580162] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.585253] ? __lock_acquire+0x664/0x3e00 [ 272.589482] ? lock_downgrade+0x980/0x980 [ 272.593631] ? find_held_lock+0x35/0x1d0 [ 272.597687] ? __lock_is_held+0xb6/0x140 [ 272.601760] ? check_same_owner+0x320/0x320 [ 272.606061] ? __lock_acquire+0x664/0x3e00 [ 272.610285] ? rcu_note_context_switch+0x710/0x710 [ 272.615241] ? perf_trace_lock+0xd6/0x900 [ 272.619389] should_failslab+0xec/0x120 [ 272.623352] __kmalloc_track_caller+0x5f/0x760 [ 272.627921] ? get_device_parent.isra.25+0xd1/0x590 [ 272.632922] ? __mutex_lock+0x16f/0x1a80 [ 272.636963] ? get_device_parent.isra.25+0xd1/0x590 [ 272.641968] ? kstrdup_const+0x39/0x50 [ 272.645845] ? trace_hardirqs_off+0x10/0x10 [ 272.650156] kstrdup+0x39/0x70 [ 272.653335] kstrdup_const+0x39/0x50 [ 272.657041] __kernfs_new_node+0xa2/0x570 [ 272.661176] ? kernfs_dop_revalidate+0x380/0x380 [ 272.665913] ? find_held_lock+0x35/0x1d0 [ 272.669977] ? kobject_add_internal+0x2f5/0xbc0 [ 272.674632] ? lock_downgrade+0x980/0x980 [ 272.678768] ? lock_release+0xa40/0xa40 [ 272.682732] kernfs_new_node+0x80/0xe0 [ 272.686612] kernfs_create_dir_ns+0x41/0x140 [ 272.691019] sysfs_create_dir_ns+0xbe/0x1d0 [ 272.695334] kobject_add_internal+0x335/0xbc0 [ 272.699811] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 272.704648] ? kobj_ns_type_registered+0x50/0x50 [ 272.709393] ? get_device_parent.isra.25+0x423/0x590 [ 272.714481] ? lock_downgrade+0x980/0x980 [ 272.718618] ? lock_release+0xa40/0xa40 [ 272.722586] kobject_add+0x132/0x1f0 [ 272.726288] ? kobject_add_internal+0xbc0/0xbc0 [ 272.730956] ? mutex_unlock+0xd/0x10 [ 272.734657] ? device_add+0x350/0x1650 [ 272.738538] device_add+0x35d/0x1650 [ 272.742235] ? dev_set_name+0xb4/0xf0 [ 272.746025] ? device_initialize+0x5b0/0x5b0 [ 272.750429] ? device_private_init+0x230/0x230 [ 272.755000] ? rtnl_is_locked+0x54/0xb0 [ 272.758984] netdev_register_kobject+0x183/0x360 [ 272.763732] register_netdevice+0xb41/0x1020 [ 272.768134] ? netdev_change_features+0x100/0x100 [ 272.772966] ? round_jiffies_up+0xce/0x100 [ 272.777188] ? __round_jiffies_up_relative+0x150/0x150 [ 272.782467] __tun_chr_ioctl+0x20d7/0x4100 [ 272.786704] ? tun_poll_controller+0x4c0/0x4c0 [ 272.791271] ? __fget+0x342/0x5b0 [ 272.794710] ? lock_downgrade+0x980/0x980 [ 272.798851] ? find_held_lock+0x35/0x1d0 [ 272.802901] ? lock_release+0xa40/0xa40 [ 272.806867] ? __lock_is_held+0xb6/0x140 [ 272.810934] ? __fget+0x36b/0x5b0 [ 272.814372] ? handle_mm_fault+0x35b/0xb10 [ 272.818615] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 272.823453] ? tun_chr_compat_ioctl+0x30/0x30 [ 272.827931] tun_chr_ioctl+0x2a/0x40 [ 272.831624] ? tun_chr_ioctl+0x2a/0x40 [ 272.835500] do_vfs_ioctl+0x1b1/0x1520 [ 272.839393] ? ioctl_preallocate+0x2b0/0x2b0 [ 272.843788] ? fget_raw+0x20/0x20 [ 272.847234] ? __sb_end_write+0xa0/0xd0 [ 272.851200] ? fput+0xd2/0x140 [ 272.854381] ? SyS_write+0x184/0x220 [ 272.858091] ? security_file_ioctl+0x89/0xb0 [ 272.862490] SyS_ioctl+0x8f/0xc0 [ 272.865839] ? do_vfs_ioctl+0x1520/0x1520 [ 272.869979] do_syscall_64+0x281/0x940 [ 272.873846] ? __do_page_fault+0xc90/0xc90 [ 272.878062] ? _raw_spin_unlock_irq+0x27/0x70 [ 272.882544] ? finish_task_switch+0x1c1/0x7e0 [ 272.887031] ? syscall_return_slowpath+0x550/0x550 [ 272.891949] ? syscall_return_slowpath+0x2ac/0x550 [ 272.896870] ? prepare_exit_to_usermode+0x350/0x350 [ 272.901876] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 272.907236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.912079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.917250] RIP: 0033:0x4548b9 [ 272.920422] RSP: 002b:00007fab512fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.928112] RAX: ffffffffffffffda RBX: 00007fab512fb6d4 RCX: 00000000004548b9 [ 272.935365] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 272.942617] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 272.949868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 272.957120] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000007 [ 272.964409] CPU: 0 PID: 1402 Comm: syz-executor6 Not tainted 4.16.0-rc7+ #371 [ 272.964466] ------------[ cut here ]------------ [ 272.971683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.971689] Call Trace: [ 272.971707] dump_stack+0x194/0x24d [ 272.971731] ? arch_local_irq_restore+0x53/0x53 [ 272.976462] kobject_add_internal failed for ifb0 (error: -12 parent: net) [ 272.985842] should_fail+0x8c0/0xa40 [ 272.988604] WARNING: CPU: 1 PID: 1375 at lib/kobject.c:242 kobject_add_internal+0x3f6/0xbc0 [ 272.991999] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.996621] Kernel panic - not syncing: panic_on_warn set ... [ 272.996621] [ 273.003672] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 273.033363] ? find_held_lock+0x35/0x1d0 [ 273.037491] ? check_same_owner+0x320/0x320 [ 273.041810] ? rcu_note_context_switch+0x710/0x710 [ 273.046725] ? tracing_generic_entry_update+0x15a/0x1d0 [ 273.052103] should_failslab+0xec/0x120 [ 273.056072] kmem_cache_alloc_node_trace+0x5a/0x760 [ 273.061077] ? trace_event_raw_event_lock+0x340/0x340 [ 273.066289] __get_vm_area_node+0xae/0x340 [ 273.070531] __vmalloc_node_range+0xa3/0x650 [ 273.074928] ? bpf_prog_alloc+0xaa/0x350 [ 273.078986] ? usercopy_abort+0xd0/0xd0 [ 273.082976] __vmalloc+0x45/0x50 [ 273.086334] ? bpf_prog_alloc+0xaa/0x350 [ 273.090388] bpf_prog_alloc+0xaa/0x350 [ 273.094269] ? bpf_prog_kallsyms_find+0x440/0x440 [ 273.099115] ? mpi_resize+0x200/0x200 [ 273.102938] bpf_prog_load+0x2e3/0x1bb0 [ 273.106915] ? bpf_prog_new_fd+0x50/0x50 [ 273.110987] ? find_held_lock+0x35/0x1d0 [ 273.115060] ? __might_fault+0x110/0x1d0 [ 273.119112] ? lock_downgrade+0x980/0x980 [ 273.123258] ? lock_release+0xa40/0xa40 [ 273.127222] ? check_same_owner+0x320/0x320 [ 273.131529] ? __check_object_size+0x8b/0x530 [ 273.136012] ? perf_trace_run_bpf_submit+0x206/0x330 [ 273.141126] ? __might_sleep+0x95/0x190 [ 273.145113] ? security_bpf+0x89/0xb0 [ 273.148915] SyS_bpf+0xe0f/0x4830 [ 273.152358] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 273.157468] ? bpf_prog_get+0x20/0x20 [ 273.161271] ? trace_event_raw_event_lock+0x340/0x340 [ 273.166461] ? memset+0x31/0x40 [ 273.169749] ? perf_trace_lock+0x4d6/0x900 [ 273.173998] ? trace_event_raw_event_lock+0x340/0x340 [ 273.179176] ? perf_tp_event+0xae0/0xae0 [ 273.183220] ? check_same_owner+0x320/0x320 [ 273.187542] ? find_held_lock+0x35/0x1d0 [ 273.191597] ? trace_hardirqs_off+0x10/0x10 [ 273.195927] ? perf_trace_lock+0x4d6/0x900 [ 273.200177] ? find_held_lock+0x35/0x1d0 [ 273.204251] ? __f_unlock_pos+0x19/0x20 [ 273.208217] ? lock_downgrade+0x980/0x980 [ 273.212357] ? get_pid_task+0xbc/0x140 [ 273.216236] ? proc_fail_nth_write+0x9b/0x1d0 [ 273.220723] ? map_files_get_link+0x3a0/0x3a0 [ 273.225209] ? handle_mm_fault+0x35b/0xb10 [ 273.229453] ? find_held_lock+0x35/0x1d0 [ 273.233521] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 273.238356] ? vfs_write+0x374/0x510 [ 273.242060] ? wait_for_completion+0x770/0x770 [ 273.246703] ? __sb_end_write+0xa0/0xd0 [ 273.250679] ? fput+0xd2/0x140 [ 273.253863] ? SyS_write+0x184/0x220 [ 273.257588] ? do_syscall_64+0xb7/0x940 [ 273.261558] ? bpf_prog_get+0x20/0x20 [ 273.265351] do_syscall_64+0x281/0x940 [ 273.269222] ? __do_page_fault+0xc90/0xc90 [ 273.273445] ? _raw_spin_unlock_irq+0x27/0x70 [ 273.277931] ? finish_task_switch+0x1c1/0x7e0 [ 273.282429] ? syscall_return_slowpath+0x550/0x550 [ 273.287356] ? syscall_return_slowpath+0x2ac/0x550 [ 273.292280] ? prepare_exit_to_usermode+0x350/0x350 [ 273.297290] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 273.302660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.307511] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.312688] RIP: 0033:0x4548b9 [ 273.315862] RSP: 002b:00007f7708150c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.323562] RAX: ffffffffffffffda RBX: 00007f77081516d4 RCX: 00000000004548b9 [ 273.330820] RDX: 0000000000000048 RSI: 0000000020eb0fb8 RDI: 0000000000000005 [ 273.338088] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 273.345347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 273.352603] R13: 0000000000000045 R14: 00000000006f2718 R15: 0000000000000000 [ 273.359915] CPU: 1 PID: 1375 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #371 [ 273.360221] syz-executor6: vmalloc: allocation failure: 4096 bytes, mode:0x14280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 273.367184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.367190] Call Trace: [ 273.367206] dump_stack+0x194/0x24d [ 273.367223] ? arch_local_irq_restore+0x53/0x53 [ 273.378228] syz-executor6 cpuset= [ 273.387575] ? vsnprintf+0x1ed/0x1900 [ 273.387598] panic+0x1e4/0x41c [ 273.390181] syz6 [ 273.393760] ? refcount_error_report+0x214/0x214 [ 273.393769] ? show_regs_print_info+0x18/0x18 [ 273.393782] ? vprintk_emit+0xa5f/0xb90 [ 273.393799] ? __warn+0x1c1/0x200 [ 273.398567] mems_allowed=0 [ 273.401974] ? kobject_add_internal+0x3f6/0xbc0 [ 273.401984] __warn+0x1dc/0x200 [ 273.401997] ? kobject_add_internal+0x3f6/0xbc0 [ 273.442908] report_bug+0x1f4/0x2b0 [ 273.446535] fixup_bug.part.11+0x37/0x80 [ 273.450583] do_error_trap+0x2d7/0x3e0 [ 273.454454] ? vprintk_default+0x28/0x30 [ 273.458502] ? math_error+0x400/0x400 [ 273.462282] ? printk+0xaa/0xca [ 273.465545] ? show_regs_print_info+0x18/0x18 [ 273.470045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.474885] do_invalid_op+0x1b/0x20 [ 273.478583] invalid_op+0x1b/0x40 [ 273.482020] RIP: 0010:kobject_add_internal+0x3f6/0xbc0 [ 273.487280] RSP: 0018:ffff8801cba8f570 EFLAGS: 00010282 [ 273.492625] RAX: dffffc0000000008 RBX: ffff8801b8ed9f68 RCX: ffffffff815b7bde [ 273.499876] RDX: 0000000000010000 RSI: ffffc9000242a000 RDI: 1ffff10039751e33 [ 273.507127] RBP: ffff8801cba8f668 R08: 1ffff10039751df5 R09: 0000000000000000 [ 273.514380] R10: ffff8801cba8f330 R11: 0000000000000000 R12: 1ffff10039751eb4 [ 273.521631] R13: 00000000fffffff4 R14: ffff8801d9bf4080 R15: ffffffff87302160 [ 273.528905] ? vprintk_func+0x5e/0xc0 [ 273.532702] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 273.537536] ? kobj_ns_type_registered+0x50/0x50 [ 273.542276] ? get_device_parent.isra.25+0x423/0x590 [ 273.547364] ? lock_downgrade+0x980/0x980 [ 273.551500] ? lock_release+0xa40/0xa40 [ 273.555466] kobject_add+0x132/0x1f0 [ 273.559178] ? kobject_add_internal+0xbc0/0xbc0 [ 273.563848] ? mutex_unlock+0xd/0x10 [ 273.567542] ? device_add+0x350/0x1650 [ 273.571424] device_add+0x35d/0x1650 [ 273.575122] ? dev_set_name+0xb4/0xf0 [ 273.578909] ? device_initialize+0x5b0/0x5b0 [ 273.583307] ? device_private_init+0x230/0x230 [ 273.587877] ? rtnl_is_locked+0x54/0xb0 [ 273.591851] netdev_register_kobject+0x183/0x360 [ 273.596606] register_netdevice+0xb41/0x1020 [ 273.601009] ? netdev_change_features+0x100/0x100 [ 273.605843] ? round_jiffies_up+0xce/0x100 [ 273.610065] ? __round_jiffies_up_relative+0x150/0x150 [ 273.615345] __tun_chr_ioctl+0x20d7/0x4100 [ 273.619580] ? tun_poll_controller+0x4c0/0x4c0 [ 273.624147] ? __fget+0x342/0x5b0 [ 273.627587] ? lock_downgrade+0x980/0x980 [ 273.631717] ? find_held_lock+0x35/0x1d0 [ 273.635765] ? lock_release+0xa40/0xa40 [ 273.639730] ? __lock_is_held+0xb6/0x140 [ 273.643907] ? __fget+0x36b/0x5b0 [ 273.647342] ? handle_mm_fault+0x35b/0xb10 [ 273.651578] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 273.656418] ? tun_chr_compat_ioctl+0x30/0x30 [ 273.660893] tun_chr_ioctl+0x2a/0x40 [ 273.664589] ? tun_chr_ioctl+0x2a/0x40 [ 273.668462] do_vfs_ioctl+0x1b1/0x1520 [ 273.672341] ? ioctl_preallocate+0x2b0/0x2b0 [ 273.676734] ? fget_raw+0x20/0x20 [ 273.680179] ? __sb_end_write+0xa0/0xd0 [ 273.684145] ? fput+0xd2/0x140 [ 273.687322] ? SyS_write+0x184/0x220 [ 273.691032] ? security_file_ioctl+0x89/0xb0 [ 273.695430] SyS_ioctl+0x8f/0xc0 [ 273.698780] ? do_vfs_ioctl+0x1520/0x1520 [ 273.702928] do_syscall_64+0x281/0x940 [ 273.707056] ? __do_page_fault+0xc90/0xc90 [ 273.711273] ? _raw_spin_unlock_irq+0x27/0x70 [ 273.715754] ? finish_task_switch+0x1c1/0x7e0 [ 273.720235] ? syscall_return_slowpath+0x550/0x550 [ 273.725152] ? syscall_return_slowpath+0x2ac/0x550 [ 273.730067] ? prepare_exit_to_usermode+0x350/0x350 [ 273.735067] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 273.740423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.745264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.750436] RIP: 0033:0x4548b9 [ 273.753606] RSP: 002b:00007fab512fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.761298] RAX: ffffffffffffffda RBX: 00007fab512fb6d4 RCX: 00000000004548b9 [ 273.768547] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000018 [ 273.775801] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 273.783051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 273.790306] R13: 000000000000032a R14: 00000000006f6c90 R15: 0000000000000007 [ 273.797593] CPU: 0 PID: 1402 Comm: syz-executor6 Not tainted 4.16.0-rc7+ #371 [ 273.804881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.814219] Call Trace: [ 273.816794] dump_stack+0x194/0x24d [ 273.820415] ? arch_local_irq_restore+0x53/0x53 [ 273.825065] ? idr_get_free+0xfd0/0xfd0 [ 273.829024] ? rcu_pm_notify+0xc0/0xc0 [ 273.832919] warn_alloc+0x19a/0x2b0 [ 273.836540] ? zone_watermark_ok_safe+0x400/0x400 [ 273.841366] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 273.846665] ? __get_vm_area_node+0x234/0x340 [ 273.851166] __vmalloc_node_range+0x4f0/0x650 [ 273.855644] ? usercopy_abort+0xd0/0xd0 [ 273.859626] __vmalloc+0x45/0x50 [ 273.862979] ? bpf_prog_alloc+0xaa/0x350 [ 273.867028] bpf_prog_alloc+0xaa/0x350 [ 273.870903] ? bpf_prog_kallsyms_find+0x440/0x440 [ 273.875746] ? mpi_resize+0x200/0x200 [ 273.879560] bpf_prog_load+0x2e3/0x1bb0 [ 273.883532] ? bpf_prog_new_fd+0x50/0x50 [ 273.887601] ? find_held_lock+0x35/0x1d0 [ 273.891669] ? __might_fault+0x110/0x1d0 [ 273.895719] ? lock_downgrade+0x980/0x980 [ 273.899861] ? lock_release+0xa40/0xa40 [ 273.903821] ? check_same_owner+0x320/0x320 [ 273.908130] ? __check_object_size+0x8b/0x530 [ 273.912609] ? perf_trace_run_bpf_submit+0x206/0x330 [ 273.917715] ? __might_sleep+0x95/0x190 [ 273.921696] ? security_bpf+0x89/0xb0 [ 273.925579] SyS_bpf+0xe0f/0x4830 [ 273.929018] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 273.934120] ? bpf_prog_get+0x20/0x20 [ 273.937921] ? trace_event_raw_event_lock+0x340/0x340 [ 273.943100] ? memset+0x31/0x40 [ 273.946383] ? perf_trace_lock+0x4d6/0x900 [ 273.950625] ? trace_event_raw_event_lock+0x340/0x340 [ 273.955801] ? perf_tp_event+0xae0/0xae0 [ 273.959843] ? check_same_owner+0x320/0x320 [ 273.964162] ? find_held_lock+0x35/0x1d0 [ 273.968213] ? trace_hardirqs_off+0x10/0x10 [ 273.972536] ? perf_trace_lock+0x4d6/0x900 [ 273.976780] ? find_held_lock+0x35/0x1d0 [ 273.980848] ? __f_unlock_pos+0x19/0x20 [ 273.984810] ? lock_downgrade+0x980/0x980 [ 273.988953] ? get_pid_task+0xbc/0x140 [ 273.992829] ? proc_fail_nth_write+0x9b/0x1d0 [ 273.997319] ? map_files_get_link+0x3a0/0x3a0 [ 274.001802] ? handle_mm_fault+0x35b/0xb10 [ 274.006033] ? find_held_lock+0x35/0x1d0 [ 274.010104] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 274.014936] ? vfs_write+0x374/0x510 [ 274.018636] ? wait_for_completion+0x770/0x770 [ 274.023269] ? __sb_end_write+0xa0/0xd0 [ 274.027243] ? fput+0xd2/0x140 [ 274.030421] ? SyS_write+0x184/0x220 [ 274.034141] ? do_syscall_64+0xb7/0x940 [ 274.038107] ? bpf_prog_get+0x20/0x20 [ 274.041900] do_syscall_64+0x281/0x940 [ 274.045769] ? __do_page_fault+0xc90/0xc90 [ 274.049986] ? _raw_spin_unlock_irq+0x27/0x70 [ 274.054466] ? finish_task_switch+0x1c1/0x7e0 [ 274.058949] ? syscall_return_slowpath+0x550/0x550 [ 274.063869] ? syscall_return_slowpath+0x2ac/0x550 [ 274.068787] ? prepare_exit_to_usermode+0x350/0x350 [ 274.073794] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 274.079158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.084006] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.089178] RIP: 0033:0x4548b9 [ 274.092351] RSP: 002b:00007f7708150c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.100048] RAX: ffffffffffffffda RBX: 00007f77081516d4 RCX: 00000000004548b9 [ 274.107299] RDX: 0000000000000048 RSI: 0000000020eb0fb8 RDI: 0000000000000005 [ 274.114553] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 274.121804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 274.129057] R13: 0000000000000045 R14: 00000000006f2718 R15: 0000000000000000 [ 274.136974] Dumping ftrace buffer: [ 274.141027] (ftrace buffer empty) [ 274.144724] Kernel Offset: disabled [ 274.148332] Rebooting in 86400 seconds..