b823c9a965d093d415b5c38c3ac5cb11952d4bcd7", "6dd1a8a774e086a3c29dfc821c04d2377824323074f10cd4d42060dd11e3cf81"}) 2018/05/08 18:53:56 executing program 6: 2018/05/08 18:53:56 executing program 0: 2018/05/08 18:53:56 executing program 4: r0 = socket(0x5, 0x3, 0x2) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002e80)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000002ec0)={@mcast1, 0x0}, &(0x7f0000002f00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'vcan0\x00'}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000003380)={@rand_addr, @dev, 0x0}, &(0x7f00000033c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000004a00)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000004a80)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000060c0)={&(0x7f0000004ac0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/216, 0xd8}, {&(0x7f0000005c40)=""/162, 0xa2}, {&(0x7f0000005d00)=""/177, 0xb1}, {&(0x7f0000005dc0)=""/220, 0xdc}, {&(0x7f0000005ec0)=""/166, 0xa6}], 0x6, &(0x7f0000005fc0)=""/210, 0xd2}, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ppp\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0x309) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000006500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000064c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="080029bd7000ffdbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="b80002080000000000000000656e61626564000000000000000000000000000000000000000000000000000800030006000000040004000800060000", @ANYRES32=r3, @ANYBLOB="b2fc0100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000010000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=r4, @ANYBLOB="b00002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004004000000008000100", @ANYRES32=r6, @ANYBLOB="c400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b757000000000"], 0x258}, 0x1, 0x0, 0x0, 0x841}, 0x24040894) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x80000000, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000880)=@assoc_id=r10, 0x4) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x109000, 0x0) ioctl$BLKREPORTZONE(r11, 0xc0101282, &(0x7f0000000440)={0x5, 0xa, 0x0, [{0xc5a, 0x2, 0x9a2, 0x0, 0x8, 0xffffffffffff8000, 0x10000}, {0x7, 0x80000000, 0x7, 0x89a, 0x5, 0x4, 0x7fff}, {0x2, 0xad6, 0x3b, 0x6, 0xfffffffffffffffc, 0x2000000040000, 0x9}, {0x3ff, 0xf81, 0x7ff, 0x9f7, 0x6, 0x81, 0x24000000000}, {0x3, 0x5, 0x1, 0x7f, 0x2, 0x3f, 0x2}, {0x4, 0x7, 0x9, 0xfffffffffffffff9, 0x800, 0x3}, {0xaa, 0x7ff, 0x1400000000, 0x2, 0x7, 0x100, 0x5eb}, {0x9, 0x3, 0x9, 0x7, 0x9, 0x8000, 0x4}, {0x4, 0x34, 0x5, 0x1, 0x8000, 0x8, 0x2}, {0x7fffffff, 0x80000001, 0x3f, 0x5, 0x6, 0x800, 0x100000001}]}) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) [ 2391.033709] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:53:56 executing program 1: 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xee03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:56 executing program 0: 2018/05/08 18:53:56 executing program 6: 2018/05/08 18:53:56 executing program 5: r0 = socket(0xa, 0x3, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d7400000090000000600000002"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105081) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, "c16f3e24d3061f31a95cf79addbb1319cba81f0925639656fddada08655d4f620b70e5a05d94c4880f62343b3e5bb8d6606acec9eafb4f719b3dd5223ae0cdc4", "24c3cb1a039b3128f63a336efc6c071cd1767582de89090e0000000000002a013dd07642b6bc44caa451c10b823c9a965d093d415b5c38c3ac5cb11952d4bcd7", "6dd1a8a774e086a3c29dfc821c04d2377824323074f10cd4d42060dd11e3cf81"}) 2018/05/08 18:53:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x12000, 0x80) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x8001, 0x4, 0x80, &(0x7f0000ffd000/0x2000)=nil, 0x65fa}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0xd005) 2018/05/08 18:53:56 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:56 executing program 1: 2018/05/08 18:53:56 executing program 6: 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xb803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:56 executing program 1: [ 2391.232375] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2391.290920] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:53:56 executing program 6: 2018/05/08 18:53:56 executing program 0: 2018/05/08 18:53:56 executing program 2: 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xd003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:56 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:53:56 executing program 1: 2018/05/08 18:53:56 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:56 executing program 5: r0 = socket(0xa, 0x3, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d7400000090000000600000002"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000000)) 2018/05/08 18:53:56 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:53:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r1) 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6f) request_key(&(0x7f0000208000)='logon\x00', &(0x7f0000efdffb)={0x73, 0x79, 0x7a}, &(0x7f0000c5c000), 0x0) 2018/05/08 18:53:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001e40)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x2) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2391.615306] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:53:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x26d, &(0x7f0000818000)=[{}]}, 0x10) 2018/05/08 18:53:56 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:56 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:56 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2391.664017] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:53:56 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) getpeername$ipx(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/05/08 18:53:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @ipv6={0x0, 0x6, "61accd", 0x16, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0x4e23, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x101, "c77522", 0x1, "c4e0da"}, "d7c991c89bb0"}}}}, 0x3e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/08 18:53:56 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xed03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:53:57 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:53:57 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d74000"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:57 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:58 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 2018/05/08 18:53:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000002c0), 0x25c) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000480)=""/104) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000380)=""/212) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setfsuid(r0) request_key(&(0x7f0000208000)='logon\x00', &(0x7f0000efdffb)={0x73, 0x79, 0x7a}, &(0x7f0000c5c000), 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x9}, 0xc) 2018/05/08 18:53:58 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:53:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000012c0), &(0x7f0000001240), &(0x7f0000001380), &(0x7f0000001280)) 2018/05/08 18:53:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:53:58 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d740000009000000"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:58 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x400, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:53:58 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d740000009000000060000"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200090100000b00000000000500000008001100fc8d2c7b"], 0x1}, 0x1}, 0x0) 2018/05/08 18:53:58 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xb, 0x82) r1 = memfd_create(&(0x7f0000000380)="74086e750000000000000000cdb700", 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup(r1, &(0x7f0000000600)='syz1\x00', 0x1ff) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000640)=0x1e) r2 = getuid() ioprio_set$uid(0x0, r2, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000700)={0x6, &(0x7f00000006c0)=[{0x44, 0xba78, 0x1f, 0x10000}, {0x1, 0x800, 0x1b, 0x3}, {0x8, 0x1, 0x9, 0x20}, {0x7fff, 0x1, 0x7, 0x80000001}, {0x7, 0xf6, 0x6, 0xfff}, {0xfffffffffffffffb, 0xe31, 0xa037, 0x1}]}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000003c0)={0x5, 0x9, 0x1}) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000680)='./file0\x00') getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}, 0x53}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f00000002c0)=0x4, 0x4) 2018/05/08 18:53:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xed03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2393.717797] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:53:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', "cc00"}, &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000400)) 2018/05/08 18:53:59 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d74000000900000006000000"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:53:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0xb7, &(0x7f0000000000), 0x0, &(0x7f0000000380), 0x0) 2018/05/08 18:53:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:53:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:53:59 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 2018/05/08 18:53:59 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:53:59 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:53:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/05/08 18:53:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2394.513460] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:53:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f0000000080), 0x0) 2018/05/08 18:54:00 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d7400000090000000600000002"]) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:54:00 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:00 executing program 1: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x4800) 2018/05/08 18:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22}}, 0x800, 0x9}, &(0x7f0000000100)=0x88) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x3}, &(0x7f0000000200)=0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:00 executing program 0: r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="05c081485b6262b0a39172190396f49a171c390f02253fc32d1ccd36609fb7ffc0c6e1d0f6709dd569da1de794e85280c531866a62592ea796ebfc04ffaf748af1d9d003", 0x44}], 0x1, &(0x7f0000001500)=[@dstaddrv6={0x1c, 0x84, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, @sndrcv={0x2c, 0x84, 0x1, {0x3359, 0x8, 0x2, 0x5, 0x80000000, 0x4, 0x9, 0x4ee6663b}}, @authinfo={0x10, 0x84, 0x6, {0x6}}, @init={0x14, 0x84, 0x0, {0x3, 0x4, 0x400, 0xc000000000000000}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x5}}, @init={0x14, 0x84, 0x0, {0x7f49, 0x9, 0x75dc, 0xfffffffffffffffc}}, @authinfo={0x10, 0x84, 0x6, {0xffffffffffffffc0}}], 0xa4, 0x8000}, 0x4000000) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/08 18:54:00 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, 'veth0_to_team\x00'}) 2018/05/08 18:54:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:00 executing program 1: r0 = socket(0x1, 0x20000000000003, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/05/08 18:54:00 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d7400000090000000600000002"]) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) [ 2395.571168] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2395.599679] sock: process `syz-executor1' is using obsolete getsockopt SO_BSDCOMPAT 2018/05/08 18:54:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @ipv6={0x0, 0x6, "61accd", 0x25, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0x0, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x101, "c77522", 0x1, "c4e0da"}, "d7c991c89bb090a1600c7a4f580012c489d903f1ac"}}}}, 0x4d) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/08 18:54:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2395.616310] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:00 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x2}, 0x20) 2018/05/08 18:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) dup2(r0, r0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x400280) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:00 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d7400000090000000600000002"]) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6}) 2018/05/08 18:54:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe2030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:00 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x7, 0x0, "1ba544533fa44e8eab9e583854a35e8f9aa362fafc38b4e91f1cc82ca84115040282dba84f3ab2d11376d4966018d322659feaa4720320a0e67acaffeec3b7b70fc9c9a8d6954af661d78b299d0aa779"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='bridge_slave_1\x00', 0x271) writev(r0, &(0x7f0000002680)=[{&(0x7f0000000600)="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", 0xe21}], 0x1) sendto$inet(r0, &(0x7f0000000340)="0e", 0x1, 0x0, 0x0, 0x0) 2018/05/08 18:54:00 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068630e3f280000d7400000090000000600000002"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}}) 2018/05/08 18:54:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x44030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2395.807610] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2395.856297] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:01 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:01 executing program 2: 2018/05/08 18:54:01 executing program 0: 2018/05/08 18:54:01 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:01 executing program 1: 2018/05/08 18:54:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x2000200, 0x30}, 0xc) 2018/05/08 18:54:01 executing program 5: 2018/05/08 18:54:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:01 executing program 1: 2018/05/08 18:54:01 executing program 5: 2018/05/08 18:54:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="47e37ad0cf344394bf43f96b36e7c2b8a31c89bfa71e3d04181fbd79e32e78c206f46261c8694cbca0f0c3a36b654599d7402360f4de392c4d02352e2bfa9eac5ad6bf23f887cd99d932ebe452444a3d7e36e2789fddffb6f82484d301ae89b9237fe4181bd8d85949071b698eb3e98f36c95a1f0b2a767074f945868c3f4f7d7723e3fa2ac02d1d26bf26861ddf2f3e9331c56070ecfa5d792ad1a543158eef363b2489e916ff914ad84192d2e2a7d3dede0bb181962a5f973819872a6c9bf7b9d4d91155601eb49166ca396b51a891913de774362ae9402a2360e2b2d9cf5613a541ce7e6f69ace6429a0767f61133579d7a3a326e9396220a416e7e81bd0816d7430f3838ea11c18671b6de108bde0465cacb01359219ae58cc09240a4df5478b5159f198aa30cc2cd899104608dcfc958b9f8b10ee48f5bfe134c7b5ac6dd5e71b4b26b910593cf8d2e0687ba041bb5bbd1f2621a7bb54181e4bfb1280f89923032885df0646c79b0334414f2d9529b69b9055cddfceaecb4f8a2b5204ab9ae167f6a328cdc912649a15be11fc9e79f482709d9e814995e32fda5c858a9ccbc5314a031500fc42905d81420431cf476dea1ec09b364020ada89761c2ecc01f5dd5abafe8458908c8f729ac6e31e3853773a1ecad7bdc4391d0dec1dafa5aa1beadadde5a751cff06ab26909b30cfae7d2bd8e8f0f5f7b135d2b58069b64ec2758e74324339254ac0af67620c1f0f5b9f48014dca2453be3a9868c6e4c6c8f3d69c0cc8ef7accf3545e945ab32c7e0bd6a1083763dc42a8d60b1148a227bf410f74a9a569037752542151cb6c6d4ad8d67f1cd0ab2e08333f8ab37564f9e825352c8c536ab567ff4e835433bdcb231423e2ab47c2e41e658415e762b912338a8b1863f9a18980be726fbaf070ebdcebbd425cd5dd541acb4793c5105dbe577538187bf86b385b7c81c8811fa6c208d2ae3ed12803ccf921c7635e30cbbe554f2c8505f698f47f473b16364a4a5223897a7de1d52658ba824d4e8368fceba90669319e6119cba19b6917eebdf0188d8b671e1e99d9b7ef46d0abef3b1e8a660bd30714efe8823fcff2c7a498273d952dce260f0b5ca3d05e6348dad4fd04d8e334b09d626c7eb6ba897404b96e765805db4ad236b22fa5f05336116d2a0a40234ca52077a10fc28442dd72075ad57e5dbc4aa71839ff258194c2a0d2897484211ce6b855babdef8fa4f569c30142fe4def002dc2e68364bfcb58a85f81b313ae657cd344f1f3b04b3e1e252e6b960ec8152ba374e7ea7f3fa0a637709cddc1c406096816e53690139e28fb41b09e79b232573e9ca0268c739acdc3939f9e5c2cd5d6c4b02e4a939425fba5ae5d61e70ceabcdad3d666a34b97c641894ff6ec04f1712109a2ef6a1e1d620d94659b659d89d9cf3de3636085cb447473488de453bdb221339ad5fa7fa352eef36deed2d3f6f1c7b02528a2ec788a286784e85cf30379d6f750e5ab99558df54905e0890f57d69c4bdd49c1478a6735deb4c91816b388282daccf2fab9b7ac7ac9dfab9be4e258e106c99c1f756f85edcbea898f3ec307cea515f49e631fc24adf198d0246a1d3482790e7b2a280dbc4e8ac936d4e9fcc91c3cb376b91e60b25c8cffbee9506db33720339c87565066c8552bd71e3cbfd10d785f3dd361f172a4dde6b6984323d91444ee6ad09e519d5f3b99c3afdebfaba9520726dbf7ef00815ec2b37f0e811e86954daf18a90c5e5ec191eb73244eb57c5c562515bb51b6b2742be1a9464e46fe5dbdbab1b1e3726b53bc109db605d23a753edfe24d4c631b35515f92928edb250093f6c1e30283b9b1c23dfe58fce85fa5a46fde02afd473b9a771d671e44ffc500a68f9e8d8f6f235aee7f341f538b6177fe52a5f782526f741558034d12201e49b15ff578ab5e53703058cc563147693ac68b3bffa90861954d5671afc3bd98e22bdad2f0bd021b1ca7b04d40880a0002fc8059e2cc62ac5e2cf121fbc337c4ce2a3caf02fcddd66cc230b8f70e45547e3b7df65c958c09ed3899368e3d70a0d9ee0d19501c3fc186208d27efc7894d1347e0fc507159fa23ae6b3b00c81912cb7c7f2339f4e8134727018fbe2c50f7a4599ee37cf3bc9f4cf59019fc8c39d66db96c5bcf2c1538f36efe8b3af642c35eed158d9ad25230acc6f42f4f5a1726102b27aaf11e003ba927d3569563f0a6f93281bbd88b1e01a99ce28bb32cfbec649ef06a444382469a6ac634892edf2ebba29865cf66d5b8d9a4c70cc10331b197704b06ed3ec6db3db9512325604bdd7de1bb952457e23d309d6fc7e8d143a9e3698e13ee862156e7647d8e1f0f38cbf39bc123b2454d5023bdad3da71535de9c177536dd30a7bf4ddf8829b48e9df4b7b8d3f44b7dc6bd71f8b72301d8151ee08da0ed7c3a5176937c775c4e5ce286a578411cdb9afb494e88672f0b27ef1a24c5ea61c82569f69d80fd0b07a29be44a371e552e6fbdb81f35bc086af19e64316cdf03e9e9890f5cced96c070d53bfca3aff8b72f969f3a46ce330b8cc3a91b9fbe70aa770c61bdcd7c4d019f9ef47987dda969af933fc66d118cb687ddd4571eacd2281be77271060df37771af2b15eb5faa585bf6ad4f4a50f2b18e914bb0a66cdb69ce61c0189d3702759e4ba859f95a52fcd2ef21be126d27a00d7b0550cea0ffbcd5ff30e511082ff866edbadf0d149b90125b1cbddf4db9bc30ed44972733a5eb31178a84e92e1bc813286bddceecd6cc92f902bc495d2d53bd4ace7b617be4cafa9c146eddac51d6459314fd57bc9a086849bf6b3e9ee17100be5c4b2704b41d9ddb607e10ed5b7a70537f216b52fdd3e3ac1b8138ea2e8ce3f675a0e86e611520c362a7a4feea316b0461c9fbf532b9965f37637e605679987ae2dadd7545fa7a2baf0242184d2f842094dd99af8478bf16ae9ba3812d5a8331caac41791148b831c8b137860c6e7c96571af00ce3a264e5dc42cb07acbb3b0f1507acb11c9d1aae86e33f3303a115bbc63a82ff45888ef26c8d87df2cf81711acaa0c730963dcd5a9b33b47d67ddf17ea9979ea5d876db519c9b43ac461c725b303ce14b9dfc936c4c26942954baa22d8fec0ad8f9b598ca424d05afb2cfb2e42e2e17e5babb8ffaddd515b9083587b21ad961acd2a481e701d45d92adeea80314a9638fa826b7eb735b3177fd2658c7d96073a40d87173de9c58e4c8cdcece3d4198bebfd0de5ea0f97abb857676c341f12d27b319f18b9a8233162f07b2bcf369a409cdf55fadc86e2bf4243b48c0e4395eef43fea92fc09889b50900ae76c3e13c40cb06ce5e7f87aa7432a78341766e1d26ccf74493b2bb0df70cbc8863d96ee7e14b823af4daa92f61c81c90770bb9b7a4684b34bae8ccb2733e8f64bfd666f9f2a9bc94efaf3a0ad4e1cc960c8b3488b5ddb9f71c9c16c5c8fe5d5ab46f09454b13796fe02720d6a7b23511f33b9f62796c15d676860f135cf424ddf6d37f6a9b175efd1aa4415cd3d09a77a4883b3d347b2d99dabebf4a79fc9dfe5dcbf04d96d7a2297803812674d191cba45f3e5f32c90ddd873b97826cd4b0bfa924a5c9ac2671effbf7c7ca74acdbf539ac0c2d6f8b51cae01aea56a70f43c0443ea36c12f1adb605fa772e84ec759bc7ba4a263e12363e1e19070d0c6525faa40c0c3e130ce1da0aaed185e52f7a532e972e333913aeb3eae0b771d901159ef8e15edc7f3becbaa73b57baf72977c1e92cd463199be1e17158590986db60977351e92efc9fe377e3bd2be5ffa3c2b0f99d70157e6a69d3438b53bb372f64fe61b9ccae9afe96eabfcdd39cd2367bf3b2ce601629ed775f4c22f2288263ed4427fae7517f1787c35c5ac54216fd0adfa331557eb024a65069a82c2189cce7ab244f94af46985803438efa0720f6dcb5e9f745daab1d44584342b8bcebd698b67fa82e5219119244a249a5d917b87fd398a8e45258487ffe9420c821c6a0a809381c8e8b881a435177bd6c46e72a68bee2f2d5bd393c3acb262340505962d7f5cc12508321c17db4f654cc1e8cdecbb2773b13467eeb7e54b8a607b54db2fe49916f30edf20af10c54e35a73f74f77d8e0ea0f868f982d7755296e6ee9ffdb34b453d1dd310ffb8fa9e0834d2ec123217badb0d872fa4813377c46e0ee00513973dad9b0e08539c852ca36c8eddeb2a574cfd6f27a91422a9d7adacaa98ebfdecd20b64162ab286b3af55254f09ef46450e0b18cb9ca4b41ac280c3981a662c9b60a2a47286db99600a4b201025562f43659d8498dff8f749f5a53c2067e519024f33c91ee248d247f6318606e20e88cf11f0ba8bf2ee809cab25c01cd3b9576a617128069b64699a3d57c9cf160174d927359c206b6b41e0f3707e5428529c68ad23f6b95db66b2cfa84ab522ea2e7c540b71824c2e9f04f08dd639f33d9e75d61c04c06cf0db7a4c80717c6228a838f59d9ca07844d5d1273f3a01823b10bc17835622783d4e3372cc58f35b5e9ba3eeff7a10ef674e19a8b1ed90b353bcc82d88ecc3e453d552c109012c1069547fd1a10d13c38f3823a80a3c0fc9037cab87d2ac562e674cea66f434d2f4214fa90ba284cfdc193f87d58455230c513667b5390fad2b9d412ffed80d0cdc44565b662620a8b29140fc21545fe9306754c4ad0307724823ea4e4272f725f88172045e8509667e6583d947728b9bc35b650f86d9708abf46f2446390f473ffd71a39a7fb95c3a41007b042cff70568d90c3c9c2623a05a5eb9f7ac093f28dc1e3a12bdcfadeb89d933a9f58864358cbba0ae25825e8a94df72414e9667edf17210361dba6f5d09ecee709a15a2371c0b32e054832924babc954d8f9485212ceaf9f3aeec418f5eb2097457b21db156325367b53f829bd16d1b446e75d0796f7f05330341ce6baf62a78ef9c9be4fde0fb2e5ee018e001eb59b8d06037d335f41db5d9597583cee5cdea113d5621ed2d05504fddc80b5dfd7d3367a48e12c9a5372b115651281a874b079ab45b9fc0c2e7dca3640d6012deb5a93c6571c4dc8e20cc89484f682038a4e87c91c3da0b4b8603f2414c66b12a7d1bdcf99c77c3ab7bfb6ef38652a550b889f6c70c9761962a1d143d143bd305da60854f4d0fa5bcbce42957470b09fe9d35851ffcc45a72dae5f06fa609c1017feb30d0de9d356744792ce302b1db97ce83df3aa97352886e8b64e303bd9144f86914617b294983458c454ae452fda6edaa5849779c7a655b084c6ee58d66bc565d91da167409b84afa87227c1ceca70710cd144aec3b70df4db5008023b5b8addf40e6a4520778747a8838ba20744f387c3cc4005006e70fdf3e0ebb9d07a3c8f516d6bc8be7c6d73430377ec701c2df17ce767d89580561ba03a0128f7d47ec77282ad71ca6561ae4e6b43539a90660f039d0267e651458d949b40da25e94f75b47cfeef31c103616be2a9e4a3af9f419651ce71f6cd701f75f0ffe691c8973b87777a7da5ba70be07f7647a", 0xf46}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="05c081485b6262b0a39172190396f49a171c390f02253fc32d1ccd36609fb7ffc0c6e1d0f6709dd569da1de794e85280c531866a62592ea796ebfc04ffaf748af1d9d003", 0x44}], 0x1, &(0x7f0000001500)=[@dstaddrv6={0x1c, 0x84, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, @sndrcv={0x2c, 0x84, 0x1, {0x3359, 0x8, 0x2, 0x5, 0x80000000, 0x4, 0x9, 0x4ee6663b}}, @authinfo={0x10, 0x84, 0x6, {0x6}}, @init={0x14, 0x84, 0x0, {0x3, 0x4, 0x400, 0xc000000000000000}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x5}}, @init={0x14, 0x84, 0x0, {0x7f49, 0x9, 0x75dc, 0xfffffffffffffffc}}, @authinfo={0x10, 0x84, 0x6, {0xffffffffffffffc0}}], 0xa4, 0x8000}, 0x4000000) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) [ 2396.783719] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2396.833690] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg(r0, &(0x7f0000002080)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000600)="da", 0x1}], 0x1, &(0x7f0000002740)}}], 0x1, 0x44800) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000622ffc), 0x0) close(r1) 2018/05/08 18:54:03 executing program 2: 2018/05/08 18:54:03 executing program 5: 2018/05/08 18:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x202300, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x40000) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000040)={0x0, 0xd3c}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:03 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:03 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:03 executing program 0: 2018/05/08 18:54:03 executing program 1: 2018/05/08 18:54:03 executing program 1: 2018/05/08 18:54:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xcf03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:03 executing program 5: 2018/05/08 18:54:03 executing program 0: 2018/05/08 18:54:03 executing program 2: 2018/05/08 18:54:03 executing program 5: 2018/05/08 18:54:03 executing program 1: 2018/05/08 18:54:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:03 executing program 2: 2018/05/08 18:54:03 executing program 0: [ 2398.184805] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x8000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:03 executing program 5: [ 2398.351747] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:03 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe8010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:03 executing program 0: 2018/05/08 18:54:03 executing program 2: 2018/05/08 18:54:03 executing program 5: 2018/05/08 18:54:03 executing program 6: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x0) 2018/05/08 18:54:03 executing program 1: 2018/05/08 18:54:04 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:04 executing program 1: 2018/05/08 18:54:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2398.873513] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:04 executing program 2: 2018/05/08 18:54:04 executing program 0: 2018/05/08 18:54:04 executing program 5: [ 2398.927181] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:04 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:04 executing program 2: 2018/05/08 18:54:04 executing program 0: 2018/05/08 18:54:04 executing program 5: 2018/05/08 18:54:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xcf03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe) fcntl$setstatus(r0, 0x4, 0x2000) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:04 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:04 executing program 1: 2018/05/08 18:54:04 executing program 1: 2018/05/08 18:54:04 executing program 2: 2018/05/08 18:54:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xed030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:05 executing program 0: 2018/05/08 18:54:05 executing program 5: 2018/05/08 18:54:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30844c4a244968a14d011f397dcf0fd2ad45bb3c5e5c83f045088d7f9a2cd903e2ff8c92850e85599e9d18a60f125861c9c90d2096794446ae836a"}], 0x200000000000017c) 2018/05/08 18:54:05 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:05 executing program 1: 2018/05/08 18:54:05 executing program 2: 2018/05/08 18:54:05 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:05 executing program 1: 2018/05/08 18:54:05 executing program 0: 2018/05/08 18:54:05 executing program 2: 2018/05/08 18:54:05 executing program 5: 2018/05/08 18:54:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x24010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:06 executing program 4: clock_settime(0x4, &(0x7f0000000000)={0x77359400}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x6080, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vcs\x00', 0x440000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001800)={r1, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:06 executing program 1: 2018/05/08 18:54:06 executing program 2: 2018/05/08 18:54:06 executing program 5: 2018/05/08 18:54:06 executing program 0: 2018/05/08 18:54:06 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1, 0x0) 2018/05/08 18:54:06 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:06 executing program 1: 2018/05/08 18:54:06 executing program 0: 2018/05/08 18:54:06 executing program 5: 2018/05/08 18:54:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xbc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:06 executing program 2: [ 2401.612547] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2401.647118] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:06 executing program 1: 2018/05/08 18:54:06 executing program 5: 2018/05/08 18:54:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)={r3, 0x1000, "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"}, &(0x7f0000001380)=0x1008) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x3, 0x4e20, 0x1ff, 0xa, 0x20, 0x80, 0x0, r2, r4}, {0x7, 0x7, 0xd5b, 0x40, 0x5, 0x4, 0x9, 0x7e}, {0x3, 0x0, 0x1c3, 0x9}, 0x92ce, 0x6e6bb2, 0x2, 0x1, 0x2}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d5, 0x7f}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3506, 0x4, 0x3, 0x8, 0x102000, 0x11a1, 0x6}}, 0xe8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) [ 2401.825015] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x74030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:07 executing program 0: 2018/05/08 18:54:07 executing program 2: 2018/05/08 18:54:07 executing program 1: 2018/05/08 18:54:07 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:07 executing program 5: 2018/05/08 18:54:07 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0), 0x0, 0x0) 2018/05/08 18:54:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffc) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:07 executing program 1: 2018/05/08 18:54:07 executing program 2: 2018/05/08 18:54:07 executing program 5: 2018/05/08 18:54:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x5, 0x21400) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0xfffffffffffffff7, 0x10001, 0x6}) r1 = socket(0x3, 0x3, 0x21) sendmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f00000002c0)={&(0x7f0000000100)=@can={{0x3, 0x1, 0x8, 0x732f}, 0x8, 0x0, 0x0, 0x0, "f849eb9bf414fd08"}, 0x10}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x1f) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="6dbcfd3b734cb0042f89700bf908f1a6e4121aedc72589aa5326d1a11d1ede0f29b411ac2fb2a696eba0da1f2e06e30613fbdc7183edde1da67575234ea67b7f5a834d2e377560b1e3cf4b542b999725779fad90b2293323ab246cfb2b3fea73098e8cbac7a54237c5f8791ac99f512c406168782796c61c2bc07885155aa36526a573e25724a4129b5a4ac75e5af1451eec3203ee27699b9196be59b5081e728046f44c4790f40678c100f208f1bcb55da6919e50eeba85094099864c1133e97c587691969d994eccec73a36c3cffab72730d7a9d2f81197f5d525c0678510837e7e1c90ae7d099214c", 0xea, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x101000, 0x0) 2018/05/08 18:54:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:07 executing program 0: 2018/05/08 18:54:07 executing program 1: 2018/05/08 18:54:07 executing program 5: 2018/05/08 18:54:07 executing program 2: 2018/05/08 18:54:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x7002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:07 executing program 7: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:07 executing program 0: 2018/05/08 18:54:07 executing program 1: 2018/05/08 18:54:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth0\x00', 0x600}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffff4e10, 0x101000) 2018/05/08 18:54:08 executing program 2: 2018/05/08 18:54:08 executing program 5: 2018/05/08 18:54:08 executing program 0: 2018/05/08 18:54:08 executing program 7: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:08 executing program 1: 2018/05/08 18:54:08 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0), 0x0, 0x0) 2018/05/08 18:54:08 executing program 1: 2018/05/08 18:54:08 executing program 0: 2018/05/08 18:54:08 executing program 5: [ 2403.549826] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2403.587416] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:09 executing program 2: 2018/05/08 18:54:09 executing program 1: 2018/05/08 18:54:09 executing program 0: 2018/05/08 18:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) fchdir(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="60ba2c3254694d01000000000008efff0b00000000040063"]) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000000)={0x132, 0x100000001, 0x7fff, 0xc46, 0xd, 0x1}) readahead(r0, 0x7f, 0x86d) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:09 executing program 5: 2018/05/08 18:54:09 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0), 0x0, 0x0) 2018/05/08 18:54:09 executing program 7: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:09 executing program 1: 2018/05/08 18:54:09 executing program 0: 2018/05/08 18:54:09 executing program 2: 2018/05/08 18:54:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:09 executing program 5: 2018/05/08 18:54:09 executing program 0: 2018/05/08 18:54:09 executing program 1: 2018/05/08 18:54:09 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) [ 2404.688370] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:10 executing program 2: 2018/05/08 18:54:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x70020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:10 executing program 5: 2018/05/08 18:54:10 executing program 1: 2018/05/08 18:54:10 executing program 0: 2018/05/08 18:54:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="29003ffbff0602001e0622e80002040000140d00150000003a514692d14c81000000e12b9f51651e0a", 0xff6c}], 0x1) 2018/05/08 18:54:10 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)}], 0x1, 0x0) 2018/05/08 18:54:10 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:10 executing program 1: 2018/05/08 18:54:10 executing program 0: 2018/05/08 18:54:10 executing program 2: 2018/05/08 18:54:10 executing program 5: 2018/05/08 18:54:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1a) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = getpgrp(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x301002, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r0, 0xba0}) 2018/05/08 18:54:10 executing program 1: 2018/05/08 18:54:10 executing program 0: 2018/05/08 18:54:10 executing program 5: 2018/05/08 18:54:11 executing program 2: 2018/05/08 18:54:11 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:11 executing program 1: 2018/05/08 18:54:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:11 executing program 5: 2018/05/08 18:54:11 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6030276a0008890040000000000000000000ffffe00000010000000000000000000000001fbba0022a2ab606b553aa1903c3f266fb5b31a46bded5f1f8c75d66e0496c3b502fb17c1cc5ae453f46e2dae5"], &(0x7f0000000080)) 2018/05/08 18:54:11 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)}], 0x1, 0x0) 2018/05/08 18:54:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0x96, 0x7}, 0xc) 2018/05/08 18:54:11 executing program 2: 2018/05/08 18:54:11 executing program 1: 2018/05/08 18:54:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:11 executing program 5: 2018/05/08 18:54:11 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x0, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) [ 2406.520642] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:11 executing program 2: [ 2406.572170] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:12 executing program 1: 2018/05/08 18:54:12 executing program 0: 2018/05/08 18:54:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:12 executing program 5: 2018/05/08 18:54:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) 2018/05/08 18:54:12 executing program 2: 2018/05/08 18:54:12 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000000700)}], 0x1, 0x0) 2018/05/08 18:54:12 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x0, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:12 executing program 5: 2018/05/08 18:54:12 executing program 0: 2018/05/08 18:54:12 executing program 1: [ 2407.339928] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2407.376644] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:12 executing program 2: 2018/05/08 18:54:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:12 executing program 0: 2018/05/08 18:54:12 executing program 1: 2018/05/08 18:54:12 executing program 5: syz_emit_ethernet(0x180, &(0x7f0000abd000)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @rand_addr}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffff80, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}}}}, &(0x7f0000000040)) 2018/05/08 18:54:12 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x0, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:12 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000becff0)) dup(r0) 2018/05/08 18:54:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) exit(0x3) sendto$inet(r0, &(0x7f0000000440)="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", 0x3c1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0x393, 0x0, 0x0, 0xffffffffffffff4e) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)=""/61, &(0x7f0000000200)=0x3d) shutdown(r0, 0x1) 2018/05/08 18:54:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x20002) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3) close(r0) [ 2407.617225] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2407.711266] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000040)=""/240, &(0x7f00000001c0)=0xf0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x101040, 0x0) 2018/05/08 18:54:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r0, r1) 2018/05/08 18:54:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000070afdff000000000000000000000000"], 0x14}, 0x1}, 0x0) 2018/05/08 18:54:13 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:13 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r2 = dup2(r1, r0) ioctl$VT_DISALLOCATE(r2, 0x5608) 2018/05/08 18:54:13 executing program 1: syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x39980732, r1}, &(0x7f0000000140)={0xffffffff, 0x1, 0x2, 0x2, 0xc5d2}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/146, 0x92) 2018/05/08 18:54:13 executing program 5: r0 = memfd_create(&(0x7f0000000400)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0) dup2(r1, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f000003a000)) 2018/05/08 18:54:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2408.579650] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2408.642208] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xe) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:13 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)={0x7, 0x4, 0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x2c) clock_gettime(0x0, &(0x7f0000000080)) 2018/05/08 18:54:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4e030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) writev(0xffffffffffffffff, &(0x7f0000001b40)=[{&(0x7f0000001b00)="8f", 0x1}], 0x1) r1 = syz_open_pts(r0, 0x0) readv(r0, &(0x7f00000002c0), 0x290) close(r1) 2018/05/08 18:54:13 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x2400) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x5, 0xb300]}, &(0x7f0000000080)=0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:14 executing program 5: r0 = memfd_create(&(0x7f0000000400)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0) dup2(r1, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f000003a000)) 2018/05/08 18:54:14 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)) r0 = getpid() process_vm_readv(r0, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/05/08 18:54:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2408.943394] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$void(r0, 0xc0045878) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:14 executing program 2: mq_open(&(0x7f0000000000)='user\x00', 0x40, 0x0, &(0x7f0000000040)) [ 2409.080136] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2409.141915] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2409.431097] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2409.435732] CPU: 0 PID: 4303 Comm: syz-executor0 Not tainted 4.17.0-rc4+ #64 [ 2409.442923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2409.452255] Call Trace: [ 2409.454841] dump_stack+0x1b9/0x294 [ 2409.458450] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2409.463628] ? kasan_check_write+0x14/0x20 [ 2409.467847] ? do_raw_spin_lock+0xc1/0x200 [ 2409.472075] handle_userfault.cold.32+0x44/0x5a [ 2409.476727] ? handle_userfault+0x16c6/0x2760 [ 2409.481214] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2409.485784] ? debug_check_no_locks_freed+0x310/0x310 [ 2409.490970] ? __sched_text_start+0x8/0x8 [ 2409.495106] ? plist_check_prev_next+0x130/0x1b0 [ 2409.499858] ? print_usage_bug+0xc0/0xc0 [ 2409.503911] ? plist_check_list+0xa0/0xa0 [ 2409.508041] ? attach_entity_load_avg+0x850/0x850 [ 2409.512867] ? print_usage_bug+0xc0/0xc0 [ 2409.516912] ? perf_trace_lock+0xd6/0x900 [ 2409.521053] ? perf_trace_lock_acquire+0xe3/0x980 [ 2409.525889] ? __lock_acquire+0x7f5/0x5140 [ 2409.530105] ? graph_lock+0x170/0x170 [ 2409.533896] ? find_held_lock+0x36/0x1c0 [ 2409.537944] ? lock_downgrade+0x8e0/0x8e0 [ 2409.542080] ? kasan_check_read+0x11/0x20 [ 2409.546212] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2409.550605] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2409.555174] ? kasan_check_write+0x14/0x20 [ 2409.559391] ? do_raw_spin_lock+0xc1/0x200 [ 2409.563615] __handle_mm_fault+0x38d8/0x4310 [ 2409.568015] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2409.572754] ? graph_lock+0x170/0x170 [ 2409.576540] ? find_held_lock+0x36/0x1c0 [ 2409.580586] ? lock_downgrade+0x8e0/0x8e0 [ 2409.584739] ? handle_mm_fault+0x8c0/0xc70 [ 2409.588968] handle_mm_fault+0x53a/0xc70 [ 2409.593018] ? __handle_mm_fault+0x4310/0x4310 [ 2409.597583] ? find_vma+0x34/0x190 [ 2409.601105] __do_page_fault+0x60b/0xe40 [ 2409.605149] ? mm_fault_error+0x380/0x380 [ 2409.609291] ? graph_lock+0x170/0x170 [ 2409.613084] ? rcu_is_watching+0x85/0x140 [ 2409.617215] do_page_fault+0xee/0x8a7 [ 2409.621000] ? vmalloc_sync_all+0x30/0x30 [ 2409.625132] ? find_held_lock+0x36/0x1c0 [ 2409.629186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2409.634021] page_fault+0x1e/0x30 [ 2409.637455] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2409.643051] RSP: 0018:ffff88019dc9fba0 EFLAGS: 00010206 [ 2409.648393] RAX: ffffed0033b93f85 RBX: 0000000000000018 RCX: 0000000000000003 [ 2409.655641] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019dc9fc10 [ 2409.662889] RBP: ffff88019dc9fbd8 R08: ffffed0033b93f85 R09: ffffed0033b93f82 [ 2409.670136] R10: ffffed0033b93f84 R11: ffff88019dc9fc27 R12: 0000000020013018 [ 2409.677389] R13: 0000000020013000 R14: ffff88019dc9fc10 R15: 00007ffffffff000 [ 2409.684661] ? _copy_from_user+0x10d/0x150 [ 2409.688891] get_compat_flock64+0x81/0x360 [ 2409.693109] ? get_compat_flock+0x300/0x300 [ 2409.697414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2409.702934] ? sock_alloc_file+0x2a4/0x4e0 [ 2409.707154] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2409.712325] do_compat_fcntl64+0x228/0xb80 [ 2409.716541] ? do_fcntl+0x14b0/0x14b0 [ 2409.720323] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2409.725248] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2409.730956] ? move_addr_to_kernel+0x70/0x70 [ 2409.735346] ? fput+0x130/0x1a0 [ 2409.738622] ? userfaultfd_read+0x290/0x290 [ 2409.742939] __ia32_compat_sys_fcntl64+0x73/0xb0 [ 2409.747678] do_fast_syscall_32+0x345/0xf9b [ 2409.752000] ? do_int80_syscall_32+0x880/0x880 [ 2409.756574] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2409.761400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2409.766917] ? syscall_return_slowpath+0x30f/0x5c0 [ 2409.771830] ? sysret32_from_system_call+0x5/0x46 [ 2409.776654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2409.781479] entry_SYSENTER_compat+0x70/0x7f [ 2409.785863] RIP: 0023:0xf7f87cb9 [ 2409.789205] RSP: 002b:00000000f5f830ac EFLAGS: 00000282 ORIG_RAX: 0000000000000037 [ 2409.796893] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000000026 [ 2409.804142] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2409.811401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2409.818661] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2409.825908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:54:15 executing program 6: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES32], 0x8) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x80) sendfile(r0, r1, &(0x7f0000000040), 0x7fffffff) unlink(&(0x7f0000000000)='./file0\x00') 2018/05/08 18:54:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x22d) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:54:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x22d) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="1219a4", 0x3, 0x20020000, &(0x7f0000000040)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4589c2a4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0xfffffffffffff001, 0x4) sendmmsg(r0, &(0x7f000000a880)=[{{&(0x7f00000001c0)=@sco={0x1f}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000b80)='\n', 0x1}], 0x1, &(0x7f0000001b80)}}], 0x1, 0x0) 2018/05/08 18:54:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:15 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff48, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) recvfrom$inet(r0, &(0x7f0000769f0f)=""/241, 0x4907517da1af81b4, 0x0, &(0x7f0000497ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x4e) 2018/05/08 18:54:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x4) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121000, 0x40) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400040, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="5f9b6d01533440ca1fd508512dbd7f526ea9c70c4823b192dd06daecacc513aba13b28d97410c966a52e27b398cc936444a9c190274863cf2fac97182bb86098371d53990b1344b1cbb5f16fbb15620d7c1b81875758ee4bef30cb50c04b8cfdacd8c0ab27173960beb11d1331e0c7af33b92e22c40f6ede738f1956490c2368d10c06c898e9621df735aaa2f2911d0ba76ccacaa5ad937aa1b4d8a74f2cfa4774163043896198cd0f04f9ec57c1616661b340483a826bc1bcbce2b0404a3df8b054f05171d6c44462e79e53b93d9bd54e8e855b2259ca2efee75f8f4a7f73d5e79d3453b20ad1c52fc608c6c5610689c1958aabe21fd0c2e311b516ea68afd7362db4f249359df6ce8f79bca08bf083385941c14dcc91c18b217784bedf715ee7885bf5b16680713325a7ba814640e3b995f31e014c69b3149bed2ddfdb8a42593829a1e5c4801e8de159838324b12a7208d8b55b922990b02213983e685867518fd5e79ede7b914d6ab35e71d2ac074dbe2ab07bdb5d9abe3f7d3315188a9f07a3d87c7f1bb7348625c190cb227557685ef6db26c0a266901212f6949ae362bde76462cccfb859f1940e0ef971d44f7c01dc4334011a9c83812d8cf9ae3fe99f7a321a9f0e7e48250a00385d3b11de78c213353b198dbceb931994521e7415eab731ba462591299309fdf0e19f7603e3a1e01a81373c97ee01af09d6087fbe3d692583ac88312d4fd8f64d0d20fc224d2fa4638dfc5dfca105815726ebbb368d75b473233db7f5c4d679ed8c49f7cbcd214dd6581ba02bc4a9cc6cc6fb8e6e109f554766d4f21597891e51e8298e2324d2359cb4f5fdb3cbe3402820473a10c6e00a2ce99c5d4865b8734055bdbbc711199c1e0a5070599828575f24847d4e4276979fc0444203c9e6f31600a87dcf48c833ffc4e3ebe6e01e3dec492bbaad74bbf802ef6b716d1c8181ce0cf7a85f7d3f6fbcbaba1aa78abde5cf5a856e80283dac035b6e61d94da0955e6dc15e72a3cd9cf72a0decf1d83e61494481a3e2ea7e8aac1e9d3784f295360c2570291b81b582d767d9a033de6bb14d1ddce7ea1914e56a7b1a054c9ce7ee06cb386fe1717db26005174aede9328936974b18ac763e80163a5241bfe33f583b95c2c00ac512d1d7cdee6cb6dd2365c46cff1fde680174ffe02ae1d0f1cd7091cdcc844f049a4a37673797d5274da008b99801c550d8c47ed151ebcb42449fe1b311cb726908a158f97b5de869dc3d321fc61ca24f6c0e4d848bc1a37e40e2d9a5656837e3359499eb2af8569fb613d2f18aebd608726919c3450178c83aa2c110fa562db54d71549519fb22902f19bf37655ffaef53260d9a354c68123d1c56a1078cbb3f53ed28dfb9082018cbd4aa77f86065157b4a1b12e141721699cf2c6bbad80c41e15ab16dc004c796058bcaa708d2e703e6174ea61f3292c7ed7aabbff12c64ecf6581a6b95b688cec974e7b50a210e5ba498516e83606ff8e96ae672a829916f8a73bb2fc70e2c53fdd3ab5909d8abc2f6cc17fd5e1800c0db144763e3020380491bf6371dc1d0d1a1d7479a4d8ac1b8291df7bf9864e7ae1e9aae29b6ba4ff4f53b527b2f4e8dd1c49cc6cc6f4758e81e7bc595b17121bee2cac97b1692e9c39c42676925b6864d4aaca8d434d479d6387dfa6edd4090e0bd08fcfc80ae0fa83d0e1e0ec1f8cd5b0863c2084b0a1d0ec0795af0f26161da046f6f7df22c70138b71305e0a8ee590699c40db1f55ce32d6f2ae6d21bcd2060be1d453f4c8a92d497b0efefdc822915486185825674cc739e44a1cdf2e204818d397c24f68502673a2d109c1c7bd50acbcd5302d7154a199fab388cd6e04296328e1a8137dc4dbf79bc25f5b7438ae5a32af67168b140ff9369259664b01c28a0af81c83255a6044cd34f09d91f76b722931234bce1c1765b396113c695db7c0a8a27f092efc3e6b8a230f09864d19375532f94163318d740b76a4bcef31cc2aff31888d790c6ab9f549b402674f4424a736c89bf5faeb389c23914bf6a853bddc7a755883d814216fe43205b368dd81c6c195fd45fee76cbce070fa8c3b12fbe916d3d3be7325af1873d54ddacb3d17368f3599957cdd22d9f6bc20ad0d25734342a543563804c670ded965785b891addd35e3ecad01b97633f540076905d33159612ae531d9a398d79631801be5062d80afc214957a34d803d065629dafa6c035edcbde9b1a88fc1d96d91ed86d0fd0d9fd9097893402513aea4a0ce8bd27d869e693f23cdf66aaaa4525e2de2064d54b101ee6a294077937454233059e4e61de8224fafba126f7f1e2cc8c538272ca85eada11889a1d6bcf8a76f787e37831ec8db22d3d2bb00303a3db3e8432fa0d6583b60393c0337d0f2a8cc02272a596b0b1acb9e7543062fd341521bc84a2b0577c7ff193c0131182f7d96ec6286782fef784f4c3af423bf370fbe875effafc1b6861b2ca692a175ae24476e99ae08e1b2a5c88359191f89431c72a6fa58d21c177679bc2d7182c1debc19f659199116da530d4d730e2ab571014dcdd198c0f51ee21ccc61dd13937d6bc579dcc2c0d155fd29925de2147edf48953bba4397acde7e318c1c879a3e2efb2963f392b1d16094a2b2a6ddbc3411ac6cc35fdf5896dec3d08ceb07dab5c783817f75fadae51701693e919ce3499d351be08006a1bc4e1694a450530c2308ec9accee9b4f0e51712b66f4813d991b531ba827d86a3285df6737e3ccf1928aa088b5abcd3999f2db61ba9a80d06bc1903ac36e9a538a8e56e8e7b5dbf79d4010abb0d388f3cd8580f5fc58a78c55273803e4069adcaa2831dc81d9af009963f3fef05388ffe04a430027966087ea29b08b96b3be553fa94d9bc36e92b6431a8e121bfab8344c916ffa51d04ee167f3e46f81d4dae053abd7990c35dfca0b256c8e89e0cd82d7c8f2a090f111f58669cb4590b7f3f84f07ef93a66f80bc0a3afff5a2612d87d95221d56a91e2f77917947485ec0d7085309f5f72cd3d40fb891222fc2192f5efa98d17ee2624945319df843fcfd8d2e4e2394ac1e2de1d2050f35ff5dbed09ff980c00454ce014e59099d9219ceba8efe75aeabea61994eb3dbc21a77aa45f089cc502342d4d7796e5e8ce6bbbf922ea9ae1468afb121445bfe5c093a854b73bacde05a2f9255b16c908d5e3d7ff30517b26997e9d2f6484fc97b1821b8ab8a4864b05af3cdadf3ad717dc411ff45e581cab7d3c2bce317993f6b2b3c00c29605975eb100775c189846daada6525bdac1390893753026711e489d1d2084d0ad0cbfb24d300589f021ae3f3ec898f8e385ee41e47229286a4abb039df3fbfd5aaf5cf72ecbf8f090027aca6f0fb33499e50ccde02dc14a4d635318bcd9f7e244ad83decd281f8f2b2fcd7e0f495e18814d1c65978cb3ab712bede5860028fa928e20ccba8a4f75cfc68e62f19397299e77eca991ccde71f43e1bafdccb34ebc09848a0c909b634ea698a9808186d33b3ecc6d52ed3b07023f196668446595de39ec041fd826de5bb17bdbc5419949100651418255f60548630264d5c47e270d81c2a78c8dffdac87fd8183fd85a86bc3e83ed83e87b2e6d6adb60cc870f588d50347d6517bdfc39f209cdb9204d1497b8b6415ca0ecfe12029a2f1d7e6358f3422d098ce1dfdf578f4ae76ed76ce4f83302a77cfe8200f203f619d347748870d97c5e0cb5a8aa7db0543647ed9d94fe7ef79092e07e75d2248e39c8a0a92f80da0e4b1dae51be7b98baa5b35fa87fd1d022724922b24c03181e8a60c0c117b9510772564b89c1c121dd046f0f54fadfb01775b23b28600196fb5e899046c14bec0953352afec46036d75540eada24d4eca8e3fcdacedc5ed7b8baa6a1147cc2e4cce35b7911d05b1c1e9da6371c387ac17337c502b743ffaba4dad1a02ea349a9125186ce360aebd9fddb8672af2717f5dbad6533a794c5053cfabfba7dba8f59038621b035f3c45353a9cb8880314327317a076129d141f9d8ca606275054f4497bbe456c64814dc0b7013f57e93aa6e69c6872a1043645426fb698a6124887e7e0756b9d9623bc91ad35bf33bd3e08c84fa9b3784d92310a606ea07fac7f457f4e2a1995640ff579239142ec567db946a978271b1b9cf5f228b78bbacb2509ccc4645497b514e1efc1277e94f5050173526ba79dd10656cd217e3aece29a5d47f8a6172ca32602943a14f84c48f5f9cb8e755113ea39a96686223df68fe6eac2a95b57ed2c18e5bae98af3b839c9194aa265c26b4c9e319fa77fea8c7c5615cce3fdf69f913406892d3f30b12c78bc773ab6d53b5554ecd93faa83ac16c319b80e83e0196f53a5dafbc7b468db9f85bc656735db83832ddb9bbee301e5f6a2f2c51522e3f8482bcd59d0bfaab850ba1851911da5c0fac1641e134911d8c156c15f5538704d9c33d6c66d4c4101e620c6b01efd2e746cc1729e75b6a4bc823140aea115833bdcc2ddd6027371b917fab9850838d9869439a87afb77787b8aa089df7796251094819479062e49fa5e552444944c84a6d544538cf59eb72c02acd7641dc62235bc0b9a319048042cda89d64126be0e89d57ef620c42f9b4446a6ee7d696a7cfba3b553c1bc2cb5f39ce901f73b867cad6d9ace60f5970533ced98070171e6e876eac01d6a8753a3a67578d2817a08cafbaa3cc71b643acc5eb4941aa8d66c18168c2522d4e4825e9559da7f7dc20cddf5cdf318555d90c2509dc43f21cf852d1354507b60f30a699821de66f1530a723f302796a73e399df42f1df30ce847e547e8a9f2c753e3b93582f11a7b29fa1ccadeff382c20527e9f7766938db224c5ab9920c1f56fdc9b8ff0558f124b3b2974b7a4f83ec29c3c6bd516667ca74ad5ac454f0a9aa5350b312713cf25218aa5b65d6f15b01ac409282364599b021d2a86376f1893c295be524daec71178603b476b67c08d21ff4837249c8005abc121e8f5e929763a07608fd9d4056a4748609f195de0b4d76f7eafd69ad765bd33b919f4d5be5df9a9c1a35423bec17b4ef64de2bdd80018567c497bf50334f3443b2a24eede169f28ca2cfb6c7c70ba140fb3acf48846b44d81cc42837034fb95cd6c507c8cc790e02c54e448ea9b48834e102c4fc87a09bbcfcaf5f01d465b4d1db2a7c2fb8ab2510128bca2c961609e9d33147ca49a011450ead102d9587dbff056288ebbb472ae0b77fb3ebc07ea6b5df78953dbaf268d3c06be1ca7e2408ac0ac318c4203386d22480d5b307857035982c387303e2cc3c2209e3d0922ad266369f3cad5e9752be36c358e66486ee964f79d615674fe0e5de2675798d969ac1d087549c7e7c53c90c8e2bced0493432a65827c99e0eec2c00a9876cc7fcc9951a9b860ed4398771464011be31c2d07a10d5e2da518496b69eb71ca649a239faab70786d6dd815b2325e6e0086e15dce2921a86fa2010536d349ae24213178ace4a09e8104b1113864f5d61f6289cc56ba719378be538e31d1aeceb495b8131f939d14ab94fcdac624543c871974e2548c8ee6fdd5fc47fb0b5bcd64b9fce79b429593750891d5fa9a9c4507f9b655bb4bd4a40e3194435fea93b3a608c8c177eb24804b3cfb98f265de5250efaecb2caf0d3c834813dd5625165016818bf3c4b422bb64e8322e5f84412b8b9321dc9f042682bf6f63cf3cb5bd3c81b196d3395fd175e56c5509a9d4e38f769e3149321d5ad6d87", 0xfe4}], 0x1) [ 2410.175916] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/08 18:54:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(0xffffffffffffffff, 0x5402, &(0x7f00009dc000)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00001aa000)=[{&(0x7f00006aaf01)=""/255, 0xff}], 0x1) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180), 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='cpuset\x00', 0xfffffffffffffffc) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) close(r0) 2018/05/08 18:54:16 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x0) unlinkat(r0, &(0x7f0000ba8ff8)='./file0\x00', 0x200) 2018/05/08 18:54:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/92, 0x5c}, 0x0) 2018/05/08 18:54:16 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f0000000040)=""/237) ioctl$int_out(r1, 0x0, &(0x7f0000000280)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x180010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40086410, &(0x7f0000000240)={0x25, &(0x7f0000000200)="f64c361cc4f2ba3a2a6394f5320f43f22413b5a3a96c38c824a692e3a80e196333e213aa7b"}) 2018/05/08 18:54:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b4ff6)='/dev/ptmx\x00', 0x106, 0x0) writev(r0, &(0x7f00000b5000)=[{&(0x7f0000b51000)="eb", 0x1}], 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f00000018c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x289}, {r0}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 2018/05/08 18:54:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:16 executing program 1: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x62, 0x4) sendto$inet(r0, &(0x7f0000dcfffe), 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000), 0x0, &(0x7f0000000faf)=""/81, 0x51}, 0x41002106) 2018/05/08 18:54:16 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) [ 2411.216403] Unknown ioctl -2139331578 [ 2411.224357] Unknown ioctl 0 [ 2411.239086] Unknown ioctl 21521 2018/05/08 18:54:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2411.263934] Unknown ioctl 1074291728 [ 2411.283973] Unknown ioctl 0 [ 2411.291285] Unknown ioctl -2139331578 [ 2411.292812] Unknown ioctl 21521 [ 2411.318902] Unknown ioctl 1074291728 2018/05/08 18:54:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='scalable\x00', 0x583) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000801, &(0x7f0000deaff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) shutdown(r0, 0x0) 2018/05/08 18:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/08 18:54:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9a030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180), 0x20000000000002bf) 2018/05/08 18:54:17 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/92, 0x5c}, 0x0) 2018/05/08 18:54:17 executing program 5: mkdir(&(0x7f000084bff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) exit(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000130000)='./file0/file0\x00', 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000d02f94), 0x0, 0x0) 2018/05/08 18:54:17 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x3) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r1, 0x409, 0x9) pwrite64(r0, &(0x7f0000000240)="b8", 0x1, 0x0) 2018/05/08 18:54:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r0, 0x40b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x3202}], 0x1) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x400) 2018/05/08 18:54:17 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3}) 2018/05/08 18:54:17 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can={0x0, 0x0}, &(0x7f0000000140)=0x80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000a0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x60, 0x2d, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, r3, {0x0, 0x2}, {0xfff1, 0xa}, {0xc, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x8, 0x5, {0x0, 0x7fff}}, @TCA_RATE={0x8, 0x5, {0x4, 0xffffffffffff0f3a}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) 2018/05/08 18:54:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:17 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) connect$netrom(r1, &(0x7f0000000040)=@ax25={0x3, {"f081c13b5f4c0b"}}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2412.393818] validate_nla: 2 callbacks suppressed [ 2412.393827] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:18 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:18 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000000, 0x40000) 2018/05/08 18:54:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/92, 0x5c}, 0x0) 2018/05/08 18:54:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000140)=0x80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d}, 0x24}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000002640)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000002540), 0x0, &(0x7f0000002580)=""/168, 0xa8}, 0x0) 2018/05/08 18:54:18 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x27) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)}}, {{&(0x7f00000004c0)=@in={0x2, 0x4e20, @rand_addr}, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000000c0)}}], 0x2, 0x0) 2018/05/08 18:54:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x0, 0xe9, &(0x7f0000000c80)) 2018/05/08 18:54:18 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3}) 2018/05/08 18:54:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xee030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x17) recvmmsg(0xffffffffffffff9c, &(0x7f0000000400)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/42, 0x2a}], 0x2}, 0x100}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, &(0x7f0000000340)=""/138, 0x8a, 0x4}, 0x1}], 0x2, 0x20, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) recvfrom(r0, &(0x7f0000000500)=""/108, 0x6c, 0x40002003, &(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0xdf, 0x6, "5a391d7b1ebe00d13cbd7ae216ec2cf2132eada46b5dde90eaa644e2cc8b72c27c4229bc9309085cd5541b23d22d7b24e13f5510eba83dfe20928cae8a01b4", 0x37}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) connect$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x2, {0x80000001, 0x9, 0x0, 0x7f, 0x4, 0x1}, 0x6, 0xe21}, 0xe) 2018/05/08 18:54:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:18 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3}) 2018/05/08 18:54:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/12) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x38, 0x39e, 0x0, 0x5, 0x20, 0x1, 0x0, 0x17159fca, 0x401}, [{0x0, 0x0, 0x9, 0xbff5, 0xd9, 0x0, 0x400, 0x9}, {0x3, 0x12ac, 0xcc8b, 0x40, 0x9, 0xff, 0x8001, 0x8}], "fff4a53c030d4bbc2d4bb04a2b8cc7695de4bb9b70c4926163b164236c7c282eb9f9dd9c6b59d3ef7277c33129ba49e5a9d6fb5630f339bf47f287c7bacb925924411510dc02c45c53ddca09f28361736ba9db6e75fa0403ab23d6ef365008b1e6fa20847d31b396fdea8147bc6269edaa8a813dabede8723ba4ddcc46fdc3b5aa33e21a6d0d4febd2bc181965b7dd9c572f5d"}, 0x10b) gettid() 2018/05/08 18:54:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:18 executing program 6: mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101002, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:54:18 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000001740)={0x0, 0x710a, 0x30}, &(0x7f0000001780)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000002ac0)={0x0, 0x7fff}, &(0x7f0000002b00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002b40)={0x0, 0xfff}, &(0x7f0000002b80)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002f80)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @loopback=0x7f000001}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="0b7711da3c5455b0d809b6b8885025faa815da21b8401bb92093d31c2fbdaf982fb286399fc20c4a9fec88387e7a31adf8aa307b8919cc1711a40f45feead4882328c94b558c0aefb84f604529754cbcaa556b75aaa3f749db174f91b511c417ed1682a76f672c544ff803e076cae4e3cc01792e025738fe95094031431a8caa4c5906f0c069cda37c25c32825cd40d1a69ed9a5ea6a2f4200710383490ed2a03c1eaff1d422", 0xa6}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x13}, 0xffffffffffffffc2}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000240)="fa061251f98f1c41ebf48fc29fb75cdd9352e31c8069f576ea3c77280b77c05731fada335f2e1df63a1f44c4dec13266244f0cb1f6f1cbd89fbd9bd37e5eadb0c918505c2d6522f8f7782075c5edcbc6eda78a30748b7fa4425c3b79f65ac614973c5a701f40e96f171ae373ca04c26f4d53bd5b04d5436f5c8398770b62372e43328a9078c5560fcde982d907dd1c52e5c312f28b8a58b8417c193ec3a9dcd35565dbc9139eec9cbd743ffe441ffbbe74c98590372d964cda34bcecfbff07a5e24162b89a230001c62d9dbc89437fa461d12bce1b718bbb1c69a61dd8c07921b20df822f19ee03a85b43adacd21e04d2c705b401f339dc26c", 0xf9}, {&(0x7f0000000340)="a12690dfcdcd8b288fea1563669099df193d7c672a73be0accc34e565960ca073e7cd6ff7c263ecca4b56a67ad0256e4c78245953c75f0fbac701da9ff0c274c36d70d6ed7d1822e", 0x48}, {&(0x7f00000003c0)="9d36aea42a305d50c1876a43d220ad32828146cb25f344570442dcb195e5895007182d2e4310a968ab50ae33fba37ceb77a80b87e0e2ff4dfe3990bbc2ea621b5d7d6d571ce15cbc0ed10b47d58b742a1804fd1b44fa5d155c33cd2aef7acb7bdcb0536057573bf703c496f4e839f8f8d04d84cc6ffb799d072b455d6151bd0fb25e44448565387514cb1eb78750a8b784f88924eef7e912154e6f5d", 0x9c}, {&(0x7f0000000480)="70f790bd486672d51cc77bb7c3fcca5d89d70362f8289b37e14a344e359d24743bb6ea18808f6e9877a47dc8dd62d7cc5ad3", 0x32}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="80aff8c7d1bfc8f3fab7afa81816eb9d376b53c16b141618f3c55535593553597287ae38c3dcb0cf1e5a91515df5e0160d64ff6d21b5d7b11b487d7964e2d6e981b9f6bf4434b450d03274d49d229dcaeffdcb64e938947760302642f22a97f235f77a341f5f7cb5c797fe182d9fa61cac194914515aeb0aabedb9404cbe7cc1d080a92981cb7015ceff4d739e9b5d0044c06b02ffaa8a6743a55c9b49150db52ee354b2aa25788898f9286afec833d7e7227129edf8a813701b553c4078433b6573867d4b06c4", 0xc7}, {&(0x7f00000015c0)="a7b5fbb980799682469a016dadafe80a3c5c9836885a997a3cee87c0533b9b4ba337439b0df6097d837f6e684d569232e48e73b2b379069e4dc49c8ee3215b1e4fbc1cbff82913bb8a3ac9a885555d12a201d4130c5b6e37e39b64324bc2d31859e406187292d7296a39a0d2ea5f8c5b6d97b75bc8c77ca606486293d2f7acd122a430e8d700cb24fcfd9f429596f72b9858b62daab03f9e98b398256014f4ec8ab49b1944f0addc35daba21a022471ff0f0daa84fab33ae51ec0ca2984e23f83da1f3253fb2f48a30c8703c6416610dbb308e6e66d26e87cf72", 0xda}, {&(0x7f00000016c0)="c8f36bc209beb6aa20958d115732d85a9657e08e7d663a1d5e4dbc219c11d70ecb3f", 0x22}], 0x8, &(0x7f00000017c0)=[@sndrcv={0x2c, 0x84, 0x1, {0x1, 0x7, 0x8, 0x6, 0x7ff, 0xaa0, 0x1, 0xaeec, r2}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x100000001}}], 0x40, 0xc000}, {&(0x7f0000001800)=@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000001840)="9ab636a7a05167ec4d0a2016c5a28e26db03da5f57efbcbcb58d5ce0b1ca9e75286846662a6a712d1e4e72b39e817b1dc3ce5f0a8891aedb4170cc1948e7aaf25a1eac3c7808ba42bf0ed16c9d63348a6d9e96d27040a1b1414dcf8865b898adbe0dc27a49696b75b606d5fc2833ad80ef0da4f0b4e7948190cdb10b31c16b52335b9eb740549ce94cb1e14212cb848c8b5138d64b1f778d9694dac47bf9d66ab06231f9d6eae6f4e4430423ab30f235ff7faca107f8f165ac0a9e3bf80c539452492170cd3099d575042e8ebf392f374d6d32453ab5e738985cb9a6e363901fa5c36f7f4371021043", 0xe9}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="b33ae9e7507e0f6032419ca48865a61fb43d90a8164a94b517bb5a44ffc002f1a4a456004808a3203227b6abcfbf6147848809c777d00bd66d3b80fa2e160506bff11a7c0cd1c6890c038693776fce7a7e9ce2f8623c2b74a306127c1eaec285598ee6ef8ba151346c056b30dcbc2ce938ebf3ee1f51acb5368d9978b03e0a77e874b7034bda91580987d9f0016fee64b0ca1791f783d261069c7eaf278602", 0x9f}, {&(0x7f0000002a00)="46707c5e4b086e8da4107d1e24db2ea553e8e79afde6456f9c3d6b475943e15fa71dc6cb0339f2b3b2c1f8e8c5a9d26334474e0f2b54c786219fd80e7595a529b7c7a4b71e053d08033b9a65", 0x4c}], 0x4, &(0x7f0000002bc0)=[@authinfo={0x10, 0x84, 0x6, {0x1}}, @dstaddrv6={0x1c, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x16}}, @sndrcv={0x2c, 0x84, 0x1, {0x5, 0xace7, 0x4, 0x6, 0x2400000, 0xc003, 0x0, 0x6, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0x401, 0xf3e9, 0x1, 0x12, 0x8, 0x8001, 0x5, 0x6, r4}}, @init={0x14, 0x84, 0x0, {0xfff, 0x8, 0x3}}, @dstaddrv4={0x10, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}], 0xa8, 0x810}, {&(0x7f0000002c80)=@in6={0xa, 0x4e20, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x6b4}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="7fbda998f4c4ae8abb990c9fa97f5e74f6c58631c3d093970712a116003f9b75392ce8698b1f937c9e3b22131f0e2e8cc6cccaedca509488b099b43b31497e06103cb17e901a7d328ebaa4ae8bf2c7b8fc4eb0ca4b7b276acdfa1d2662f4944de35e8fa79a5c4cf72d77d0e3973650ac635d1c2df58b05bf357e46aa9edf0943c4891a5d3a934171b62414cb3d790c5ea7ba3a1364e86faac06d26e4d2d5b922ee86f9a5d9854f1bac592d51236232648f6f3d525a6e650eb6ee6171d1a5f0d0ecbd8db3ce6935b35ec60e", 0xcb}, {&(0x7f0000002dc0)="7960607dd1358fedcfb2d4946472ae79db14f5cab4035b95ff6b2b66733896c6f895f32cdccf18b4bca13678c0fdea3f6e192484e5ec75af5972884ffede100c11b7095965ac353a46f81b9026c9e85bd569975fe9b3a5837085ca24a08a51550bb783eaf13033431c779d04772c23830d72de56de5dc2719db29a242f48dbc1348ccb4c81b80fca98880ad69e38c3", 0x8f}, {&(0x7f0000002e80)="206d0ce5364bc832c097060a66647fa6d6f3f401255aabd44e00a9ee6fb9a94108b3e0aaab2b5949528be1d4575520338433fb8c2ed27b3fd04a75f1be7ac397cc3c487e68846e0c61d3d17333c2572549e5ab62e825463030a53e9ee0dd9527b638f63659b8c0", 0x67}], 0x3, &(0x7f0000002f40)=[@dstaddrv6={0x1c, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}], 0x1c, 0x8000}], 0x4, 0x40000) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) [ 2413.742608] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2413.757984] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:19 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/12) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x3e, 0x5, 0x0, 0x38, 0x39e, 0x34a, 0x5, 0x20, 0x1, 0x0, 0x17159fca, 0x401}, [{0x0, 0x6, 0x0, 0xbff5, 0xd9, 0x7ff80000, 0x400}, {0x0, 0x12ac, 0x0, 0x0, 0x9, 0xff, 0x0, 0x8}], "fff4a53c030d4bbc2d4bb04a2b8cc7695de4bb9b70c4926163b164236c7c282eb9f9dd9c6b59d3ef7277c33129ba49e5a9d6fb5630f339bf47f287c7bacb925924411510dc02c45c53ddca09"}, 0xc4) gettid() 2018/05/08 18:54:19 executing program 5: ustat(0x2, &(0x7f0000000040)) 2018/05/08 18:54:19 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) write(r0, &(0x7f0000000080), 0x0) 2018/05/08 18:54:19 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x123200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0xffffffffffff8001, 0x0, 0x9, 'queue0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8001, 0x2040) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) 2018/05/08 18:54:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xc, {0x2, 0x0, @broadcast=0xffffffff}, 'veth0_to_team\x00'}) 2018/05/08 18:54:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/92, 0x5c}, 0x0) 2018/05/08 18:54:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2414.511015] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x80000001, 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="19", 0x1) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:54:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:19 executing program 1: 2018/05/08 18:54:19 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0xf, 0x805, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) [ 2414.566321] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:19 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0xffffffff00000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000740)={{0x7, 0x0, 0x0, 0x0, "b333bed523af39e3bcc65d296abc7a4a7d690b1b4c5e7cb52931e695fd636b247a7ae4b9a57ea78b2bfb1ae7"}}) [ 2414.672556] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f00000001c0)=""/250) 2018/05/08 18:54:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x583000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000040)="067646ccc32af575d26a508cc055e69efc178d980d71ff0b88f61aadd3782244a3e23ee14331db17329216f91c5ccac7a9a72167a41b1b0f20dc6bb0793e50ec3ccb028ec7d7cdcf7fab98767cedd103259510899e9e3a956fac0bbeedf8715e051aa04a6c8a50c98af949b3ff96762fceee9a96b7eb732d443a0a838292275e1d0f827814e6d4199512644e44c591f364572447405027d2b1748536226447e5331db3e2742fcd24075ac80152e1ff7591"}, 0x10) [ 2414.806489] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2414.825211] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:21 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x3, 0x178, [0x0, 0x20000140, 0x20000258, 0x20000288], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x10, 0x0, 'ip6tnl0\x00', 'vlan0\x00', 'syzkaller1\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [0x0, 0x0, 0x0, 0xff], 0xa0, 0xa0, 0xe8, [@m802_3={'802_3\x00', 0x8, {{0x0, 0x0, 0x0, 0x7}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"e9401587a4e94340f6c4c641921ca2b98672c2a4b3d8d53c25112dcc7fdb"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1}]}, 0x1c0) r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x725ddd1d, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r0, 0x0) sigaltstack(&(0x7f0000f1f000/0x3000)=nil, &(0x7f0000000000)) 2018/05/08 18:54:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:21 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000100), &(0x7f0000000140)) 2018/05/08 18:54:21 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0x7530}}], 0xfffffe03) sendfile(r2, 0xffffffffffffffff, &(0x7f00009bcffe), 0x4c35) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) 2018/05/08 18:54:21 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2018/05/08 18:54:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/203, 0xcb}], 0x1) 2018/05/08 18:54:21 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x0, 0x9bbe}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xbc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:21 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:21 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101002, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) [ 2415.989717] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xff, 0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getegid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000002c0)={0x7, r7, 0x1}) setresgid(r3, r4, r5) 2018/05/08 18:54:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x200000000, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:54:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000011000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_delete(0x0) socket$inet(0x2, 0x1, 0x13) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x3, 0x0, "568ba1532d9fa4a4a0b2ac7fed1ba5df6183c56aab4b149a87b45ecde423213c30734da7de0daefc4f85152077b0196e06e5a1d95840e8dc7eb18f5f2781abadec7c9d4ef97335343396d95c6c3a63db"}, 0xd8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x3f, 0x8000, 0x9}]}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r1}) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x101000) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000000700)=0x54) ptrace$pokeuser(0x6, r1, 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x1000000000004e23}, 0x10) recvfrom$inet(r0, &(0x7f0000000240)=""/247, 0xf7, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) finit_module(r0, &(0x7f00000000c0)='{proc}\x00', 0x1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) sendto$inet(r0, &(0x7f00006fd000)="c3401c", 0x3, 0x51, &(0x7f0000e66000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000180)="ea", 0x1, 0x81, &(0x7f0000000340)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/08 18:54:21 executing program 2: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:54:21 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3275b9e22e78e322943acc4b090000000000000031ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a") flistxattr(r0, &(0x7f0000000040)=""/2, 0xffffffffffffff1d) 2018/05/08 18:54:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) 2018/05/08 18:54:21 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:21 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000140), 0x6) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) [ 2416.361302] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:21 executing program 0: r0 = socket(0x11, 0x803, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000e77ffc)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000100)={0x10}, 0x8, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) recvmmsg(r0, &(0x7f000094f000)=[{{&(0x7f0000e19000)=@nfc, 0x80, &(0x7f00006ca000), 0x0, &(0x7f0000560000)=""/129, 0x3d2}}], 0x3a6, 0x0, 0x0) 2018/05/08 18:54:21 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x0) 2018/05/08 18:54:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xffffffffffffffff) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:22 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000140), 0x6) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) 2018/05/08 18:54:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:22 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:22 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='mqueue\x00', 0x0, &(0x7f0000e2ef53)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00006a9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000039fff)=""/1, 0x1) write(r1, &(0x7f0000000280), 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x4) 2018/05/08 18:54:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={&(0x7f0000001000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x709, 0x0, 0x0, {{@in, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}, 0x1}, 0x0) 2018/05/08 18:54:22 executing program 2: clone(0x0, &(0x7f00000010c0), &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/05/08 18:54:22 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000f0f000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000090601001557fe760000000000000000"], 0x14}, 0x1}, 0x0) 2018/05/08 18:54:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x6c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) socketpair$inet6(0xa, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) sched_getattr(r1, &(0x7f0000000000), 0x30, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 2018/05/08 18:54:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xb8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:22 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000700)}}, {{&(0x7f0000000740)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x20}, 0x80, &(0x7f0000000c40)}}], 0x2, 0x0) 2018/05/08 18:54:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) 2018/05/08 18:54:22 executing program 1: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)) [ 2417.563773] validate_nla: 1 callbacks suppressed [ 2417.563782] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:23 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/08 18:54:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xee03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:23 executing program 1: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f0000000100)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/05/08 18:54:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/05/08 18:54:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x20000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000001c0)="92c8a00ed62b1813e1976a9e021be15724599ac581d64be2102f0c6932a86294f6b8fabb0ef230a57377234bb08066cfc19b80b08d73da041b2f7cb9b1d901b8d376fcd5765c1c5da3e2caab34b3af91af888dfd692e5ff9cc850ec0057f44bd36f27d31d58f4e79baa72a3b1e21a58da52aefc5b9616eb188d7245c9cf735589dff449a190df4a7bdcf9c4e1b8f0286eb1a605cb7bbaa699b7707d8444ce3b55bf3cf699d35f9e751b4d7773d0401ca09f60fed23dece83e483bf825b67ac67fdd9af") r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3ff, 0x100) mmap$binder(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2, 0x80010, r2, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 2018/05/08 18:54:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 2018/05/08 18:54:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)="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", 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x1) 2018/05/08 18:54:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b090000000000000031ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") flistxattr(r0, &(0x7f0000000040)=""/2, 0x2) 2018/05/08 18:54:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}], "", [[], [], [], [], []]}, 0x558) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/195, 0xc3}], 0x1, 0x0) 2018/05/08 18:54:23 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) prctl$seccomp(0x16, 0x1, &(0x7f00000000c0)={0x2000000000000009, &(0x7f0000000200)}) 2018/05/08 18:54:23 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x3, 0x2b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000140), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'irlan0\x00', '\x00', 'team_slave_0\x00', 'veth1_to_bridge\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0xe8, 0x138}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "d6b5f1e6fa54fd9e47d5482c9c5508aea1ab15ca325e3cdc90929d88576770de9b9a723fb693a0048b3295ffe2fd3aefe14570af7d3ffde5c6b0f30f77c73500"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x101, 'syz1\x00', 0x7f}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x13, 0x58, 0x893f, 'erspan0\x00', 'gre0\x00', 'ifb0\x00', 'team_slave_0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"37865c1bc7de1cff6b7502fe842030629253268be5d682975388dd3bbd04"}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x2ec) 2018/05/08 18:54:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9a03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0xc0045878, &(0x7f0000000140)={'bridge0\x00', @ifru_addrs=@hci={0x1f}}) 2018/05/08 18:54:23 executing program 2: syz_emit_ethernet(0xffffffffffffffb8, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [{[{0x9100}], {0x8100}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0xffffff94, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)) [ 2418.494905] kernel msg: ebtables bug: please report to author: Wrong len argument [ 2419.201250] audit: type=1326 audit(1525805664.358:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=4762 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7f87cb9 code=0x0 [ 2419.295305] audit: type=1326 audit(1525805664.452:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=4762 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7f87cb9 code=0x0 2018/05/08 18:54:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x3, 0x80000001, 0x1}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80585414, &(0x7f0000000080)=""/46) set_robust_list(&(0x7f0000000200)={&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={&(0x7f0000000240)}}, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x10) 2018/05/08 18:54:24 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x0, &(0x7f0000ad5000)) 2018/05/08 18:54:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000003740)=[{&(0x7f000000b640)=';', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) readv(r0, &(0x7f0000119ff0)=[{&(0x7f000061e000)=""/4096, 0xfc74}], 0x3d) 2018/05/08 18:54:24 executing program 0: r0 = socket(0x2000000000a, 0x10000000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x40000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfe, r1}) 2018/05/08 18:54:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x7403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:24 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 2018/05/08 18:54:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0xc0045878, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, "0008070000040008b22c582bf3aed17d"}) 2018/05/08 18:54:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 2419.501727] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 2419.567236] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2419.578436] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:25 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000040)="d548574b2f8c033d46cd9b6ce2881e434132833d293748da73a5f74b2e23caae"}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)={0x303, 0x33}, 0x4) 2018/05/08 18:54:25 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00003fd000), 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0x3, &(0x7f000004c000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/05/08 18:54:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/08 18:54:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)=""/250) 2018/05/08 18:54:25 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x0, &(0x7f0000ad5000)) 2018/05/08 18:54:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x3}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2420.341233] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2420.410527] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:25 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x31c23076f63d3c) 2018/05/08 18:54:25 executing program 0: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1}], 0x18) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/05/08 18:54:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x3856, 0xb75c, 0x6, 0x7d6, 0x9, 0x1ff, 0xffffffffffffff81, {0x0, @in={{0x2, 0x0, @rand_addr=0x6}}, 0x6, 0xa2d, 0x100000000, 0x7, 0x9}}, &(0x7f0000000280)=0xb0) r2 = accept4(r0, &(0x7f0000000300)=@pppoe={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000380)=0x80, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000400)=0x1e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x1d, 0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000100)=0xe8) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x500, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000480)=""/127) 2018/05/08 18:54:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xbc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2420.522911] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 2420.544569] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present 2018/05/08 18:54:25 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:25 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x0, &(0x7f0000ad5000)) [ 2420.588607] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2420.605553] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present 2018/05/08 18:54:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:25 executing program 2: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x800006) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x25c) [ 2420.652894] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2420.717870] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/05/08 18:54:26 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:26 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x800000000000001}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/08 18:54:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x105002, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 2018/05/08 18:54:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fsync(r0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 2018/05/08 18:54:26 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 2018/05/08 18:54:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0000)={0x80ffffff, 0x1700000000000000, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020100030c000000000800000000000005000600000000000a0000000000000000000000000000000000ffffe0000002000000000000100005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000"], 0x60}, 0x1}, 0x0) 2018/05/08 18:54:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xff010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:26 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 2421.306281] print_req_error: 120 callbacks suppressed [ 2421.306292] print_req_error: I/O error, dev loop0, sector 0 [ 2421.333332] print_req_error: I/O error, dev loop0, sector 0 2018/05/08 18:54:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) clone(0x8240000, &(0x7f0000000740), &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) 2018/05/08 18:54:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/05/08 18:54:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000007540)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000007500)={&(0x7f0000000ac0)=@ipv6_delroute={0x1c, 0x19, 0x801, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:26 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x801}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @rand_addr}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/08 18:54:26 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4e03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x10001, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x93f) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)="b67f67a31b3892aad5083e00294f5e35fa95c33de967d0e4a7b6bc0b637bdd7d80e4f226e79728e4211a5ecdac08d8030dee15d4fdeabbccc00694d7c6dd60463ae67ba5ffabdad0299abc875b9c478a28817b6b843911a385dbfb5753eadce4d0702ff2ac86a4dd7828e5b99efce12843caecfb7dc69c8c34079133d1d917bcd9c978c59a38232982f0aca3a11c7888f3d7a1d731d2096ce18f9b08248896b180ca04159f618b8e253afc2dee9f15648a531f66c3760b098b8db04e3bc8728c", 0xc0}, {&(0x7f0000000300)="5661c939add701b9144cd6889d7a6bdff3406f42f8f25098b4d0f5293d31ed93522438245b766a92b103814cb8a42e8d62efa5f55742e0d495db58560f17e34987e3774a885613b0a7111624229ced6d1539aaa5582eff3c2d683341b9d952de04a660832a59bdc448096ec63e41c4285b6b51a03951a60d8f6105e45be6eb43a905305d092facebd1ad096f9e90414f47a744a042a45c2832a9e0c28075f217c78abc134733cb65251027c92f6f54f86ed88a41efeb20adcc2110", 0xbb}, {&(0x7f0000000100)="7984", 0x2}, {&(0x7f00000003c0)="7f10108700e34e83fc7ea38e98ea00fe35407f7e771bd2581274c019a033ab7293d60ea18cc26619419cd5e69aa5a0e4aafe389d3b647aa15e58a7148500150b70c6aa1b094f69c1ee2bcf8277e8429998af2c95542832947e5e1ad9c15475a486c591a94555c2593fa1e2f350c67548babf079c56b8f48f378c777168690b3f026a3149c1dbb29fa7df2a56f848c9beb6be5ebab6579929dd5bb2a876897d72b99de41d2726640f77c731767c3c87492754d1d7db0f76451c0e7e660bb824318f522268f8287d9e8684eb00e750906c79ea551883e4d19c9c372430550fa9f263e0d74a17ad9b295cf83ff77b0bb554b1f28d", 0xf3}], 0x4, &(0x7f0000000500)=[@rights={0x30, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r1, r1, r0]}], 0x78, 0x41}, 0x20000000) 2018/05/08 18:54:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 2018/05/08 18:54:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:26 executing program 2: r0 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x4a, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 2018/05/08 18:54:26 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1000) 2018/05/08 18:54:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/05/08 18:54:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000008ff6)='./control\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000080)='./control\x00', r0, &(0x7f00000000c0)='./control\x00') 2018/05/08 18:54:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:26 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:26 executing program 1: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000008ff6)='./control\x00', 0x0, 0x0) futimesat(r0, &(0x7f0000000140)='./control\x00', &(0x7f0000000200)) 2018/05/08 18:54:27 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) getgroups(0x6, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) setfsgid(r1) 2018/05/08 18:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x24, 0x1d, 0x513, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1}]}, 0x14e}, 0x1}, 0x0) 2018/05/08 18:54:27 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa}, 0x1c) 2018/05/08 18:54:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x90020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x52000) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x6, 0x7, 0x5, 0x9, 0x4, 0x7}, 0xdb2}, 0xa) setsockopt(r0, 0x2, 0x80, &(0x7f00000001c0)="9d0938054a54da045d9db1194a590f5cb5341ce6b5b33291df4ec9450bd8afb26ff6a803cb1e95e0805e85cf7b53119f944d73fb8933d8252fb9786f2b18c60dea9d23bfadd044813a7530313d58e939d40a141b7d8c8dcde5365ce80faf79ac1dd1218e36c3316b44cb5db454e8426b2099be631a9d95dd1a3656da765c3f9647b44f4971ea9de749f6b478d6790b8923e4fb5bc1f2ee336753aed33914ff758920b987fa3c31137a25ec26dc11c7f838ac947f8a3e107a2baaf2c99fc04e38dab585c15eee04ea441a3fbb8188fa048373a5db2d30191bd6e7935529d958486b89", 0xe2) 2018/05/08 18:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:27 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) 2018/05/08 18:54:27 executing program 6: connect$l2tp(0xffffffffffffffff, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:27 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=[&(0x7f0000000300)="46adf56fc8638425b23d0424ca7bd94823b4a7a62bbf002be8b4c58f1021e5b7c9156db4a0b8c52e1843989827b377c04842aa3a26831583b1be984b000afbb2bbac5defd338cadff83ed5daa42bd6b882d573a97dd122ba9356a65bb8e7b1909b8abb1abb105bb5008cd43d8acec065d032adf609da377220"]) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:54:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x0, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:27 executing program 4: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:27 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:27 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:27 executing program 7: r0 = eventfd(0x8011) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffff90, 0x8) read$eventfd(r0, &(0x7f00000000c0), 0x8) [ 2422.787788] validate_nla: 7 callbacks suppressed [ 2422.787799] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:28 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) [ 2422.860676] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @remote}, &(0x7f0000000600)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000680)={0x0, @local, @multicast2}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x110, r1, 0x400, 0x70bd25, 0x25dfdbfd, {0x3}, [{{0x8, 0x1, r2}, {0xf4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5b4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:28 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) 2018/05/08 18:54:28 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x0, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:28 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=[&(0x7f0000000300)="46adf56fc8638425b23d0424ca7bd94823b4a7a62bbf002be8b4c58f1021e5b7c9156db4a0b8c52e1843989827b377c04842aa3a26831583b1be984b000afbb2bbac5defd338cadff83ed5daa42bd6b882d573a97dd122ba9356a65bb8e7b1909b8abb1abb105bb5008cd43d8acec065d032adf609da377220"]) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:54:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup3(r2, r3, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/38, 0x26}}], 0x1, 0x0, &(0x7f0000000500)) r5 = dup2(r4, r0) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x16) 2018/05/08 18:54:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:28 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x0, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:29 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) [ 2423.825200] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:29 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8922, &(0x7f0000000180)) 2018/05/08 18:54:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2423.869909] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0xffffffffffffff0f}], 0xf2) 2018/05/08 18:54:29 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0x0, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4e03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:29 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000280)) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000100)) 2018/05/08 18:54:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x101, 0x801) r2 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001400)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000001500)=0xe8) getgroups(0x3, &(0x7f0000001540)=[0x0, 0xffffffffffffffff, 0x0]) r5 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0}, &(0x7f00000015c0)=0xc) stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0}, &(0x7f0000001700)=0xc) r9 = geteuid() r10 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001940)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001980)={0x0, 0x0}, &(0x7f00000019c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) sendmmsg$unix(r1, &(0x7f0000001b80)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000000c0)="0770f4644064b71faa95b6587bcea71bd6eb1412db97f341a3baccfc46d58ad8b140ebd8787f9e793b986fab5ece38917d26c85916d81558951f07e369f2d0f1793fe37d258360cf4e66b6a6c0b86780496e1943e0c2aff6a86ee9a3b4f9f76f419ef97ea44ffc96932b6b3d8236b6150890a3b6a73326c7329046", 0x7b}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="93b7044b5062d04948b8b63796dd63222f88e4eb093dc5c5d3c2502a95bf081afed6c02d8de28049e8ff3a42b7f2972e694b381feaeddb9b21b1c8a0cb7ec7c636804f84bf650c6a2714af504c9592bcc91d1557bac460c7ba6e931db0b63dcb694a2cb83542e9edfefd812648f5da9a48aca949960f3658f67d88a31a0d313a9394875f00fab558ae3423a05263eb92e2b41c6f69ed611e3e19e7c7c9d3a1bacef7e7b30c4a882c72cbe1cb4628f0c75377728e23b22e055fd72a9c59f0790ef3120620ccdc8a7ef185c53822b95186251b53982ce8ae6c65d18564adacff92970ce94737c1e7901b37a4d94fdbd52c83bbef8e88b0e7ce259a598ad47ce7a08560a3c58036295a86f3e1f59818e5535ae989a78200eadc413de5af86363b18f82db8ee290ecf2466ff0c0d46fa2b67871fe181b817cde741c75a0ab7144781fce71f4248d7afc3d78efac24044f834727273fd1febc60f6d2d19ad66a57f0fc80574e326d79457f94e23d2c845e4983885397aeb0b2f5ff4688f4404feeffabaa188ac860d713b5052c7cbf5b11273312e19186156064c7b72b2d3fbb244f9f8c0c3c3fe0f1998ee2a5e5839388997fe44c108043ce56b100336bc70899626145d7739102c5f39a3660aeed7df0b371c4889dcf12a2ffdafa2a4c1d005c9cc8d950fb8d8919fce16fb88dedf7c531a688220fb22cfb42933d603a01f2465aedec4a7c707084f600abe0904e9a2b4781dac28fddb594b82efa6fac45e8ae9d7cc99cd06cd0660b92ba7f38b6f3e9ebb626647fbceecbec6ccd4e9afc240f19ba825185f250714647a6d32988ceeca5c898c8ad5ea7bfe77f668d447197f708cec77bec360f0350ec82364b08acac7ae97acf17d21eb9c671a4979b991d15fe36ff9b2c65d6c55175f2eab47379c2d5845f2c0729a61a993ec19f2924abc7848f380b2d87d6dc02d602ac3ff698e6e0d160d187d875ed6d30681480e0e7603f3e12bfdf64bed2ae36992297fb14b24dfd2bda60d49478556b62b0925fc081a9fcba3a88ad6a783de31d242f624bb97ab81a90579a639afdee8fec252b18137221250362d45abfc27f515a24ac910ebb8255052cb79350daf38355b63f462b1a88b23cdf5da66d73d08b4de1d7eb0100ff32031faee7b72c68bb10ca1376ed135c84bae7ebdb67dd9fd71ae388b986d755798b4a1100dd63afed3f70614748e50bd2d510b0c14d5846ad75d6d5fffd2ca75751f40c44acc764cadd2ebe6c5e2c0dc509b1b8cf00f03672757bfb3bd38e702507a6bde2a5396deba38635c7f1d2a406435094a4a258021e7db33d642f1eabb677ed2c4447d2e5a7ad729a4e89d36138bf13e551bb6d0222a541054f30f3c781aa6e8017a4d1e4bf9d72e7ea145de815a6a2d1aba82d6a87ef7ffd60e7c4bcde5bc09e0ddf3fe50e4a63ea869b4906c446d0388bfd29d094657fb8a3a183667d3583a6a2a170d2b2cd112d45f36ff169c8a63f8d86fb11542233342009acdf01500be200a6387dfac76af23477c9ea503d80a8b8e4989c1148feb1e8b883ab7e846d14e72dfb0af0111ce5cf1464b39ff5fbba95f6de0f907d8e0a9c9edabfce62a2d645896c52a659bbcf749d79f63427cec462504f81e4039412984814426234b6a074ab7dcd851d71a00a559e10d1bb0a073f28ecd031153c55126dba7b7cb3a1f8549c11be8f62ef5b347cfdd61792bdec2f9534551bf2a62f36c9735e305081329f283d11a9be4e5e1b4d67e362be103545691ac4cf7410fcaabf98bd042cd048ec44e6fef9b1041bb4e5770cc7fbd3977a10b532813e30fcc1677cb9e84c2f4625f93d91f515566728e2dfa6264c9a327940e80a055ab835df83f08bdbca9d3aa7d2f26dd1f67203b5d9f6571999fd665a3e8955922a39b6abbf3fe48aa7c7e443b6c32878366416d55ad9a8aee168c7c4b99d4c6524bdade48aa6c9c8ccad8f0b70ea516546acd435a7178cfc9db05943c959e790983196c0758cabf953d6a68b9eb8fa92ae270b0fbb94990d5a209208424b54d868a62b26d1ab079c1bcc0ad492d8da1fa186739df7699d508d647345bcd2cf346638ef58611445380baf0288f70a0f324aa1128d62c73857e20940438f5ebf8715b97a31a9bd9ceb097c02ea8ed6f67855a9d8ee8d63af0064c184eb3446f56cbcfe784ac3913d74a52827ef4cf66cd003c87f86a4c8a568fc31810182fb6047362a95a81cba615084dcb1d75b2597a77832924a3d6c06327e9c48e2d54d7a4d41e3e2fb8a86d4a2da280b459a13879ff604c041f4b5f43b5ae053e16d97578df7ff17b858b146ee32880b79358c50097641f3a1447c00827efc2b1606823e83987adcddd28628ecf88fb0ff8c3754bf0b9a761e9a5fecd98a0c8f9b142aca4381600fb38367132d7a6f07bff35d3b65e55e754f9b954afd87c651f1a2a269479dbc131268b737f00363b9fca20f8928f025ad7cc257587cf6c01152d878ee12c66d495a91b5396d1e828dfbb14ce3ccf8c5b3dfcfba8f57f500ab2bd76f081ba4aabc36a908d052b25d1610fcf2d6585c1822e538a9a8c0329147cd13a2125f76230f48f9f2f905fa2ec0a94e94952e859445e300001d2f60ba222af22ff50bb874ed51e2ea703312b7888dc9d4373b416da8d862875ec08671a22bfacca4c5d0f2d637bebe9e406aa1065d2f0f8c7ce45f17fa97fed7938875014c514f91aab1bc218791d057db2fb9a40e0864543505ac30a6d429afb2da6ee9ff78d1d97ef8b236254e7eda84a16e40465e3ca300a798355a9d3c0604863223c15d4fb260239332ffe6555e07ab16d1c2ec0407aff471e1ca29f5b3d5b05ca7834699a0215a86f623097e50bc439d4ba01bd30b9c39c16cf4ff3ab2838da09ac03706155c6323ec958ad756ab13ffe53e04a17eb9922848b3a036596db725a2d2f3cc273c913b6083f98dd1b47f351a3ec722e45d0098b06200224aeb1f4a625007fe2bbae80fc5ef90acfb269b63a4a0f1f8985ab581637ab591ead4f497a2ccd4cf40f429c9a87c69900bf3f8ae60ef2257acb89e50797af064279a71ebb299588f46c29789f734b5094f6c704a5c5c71f8f709dd54065ee3a802c667689c794b82a1a618e897bb3da8dc79eae5a484030071df73b8f43aeb42ba3564f54fbdddb5ca9b0fbf509e1be42a488c91ab694dad4938a22734877be6d7dd03c62cd8552a97a02ac14fb45052d2bc65614c23ca9b48abcbc0a58082e647dab8d3386fcae6169d0c3984f05c12582ce295609e2d727c0aaae863782ac5d4de6175f197e06df91c65b53aa17ae8365cd1711244e28ce517624ea832eb51fac8848087f2a7b535aaba49e35227398f597d9d3623acebbb1480abdf95aa2ff4e037369f7c000a043cf571c80c7395e49d321aa89fcfbb279d0c5caee11602603e95307b849134a722ebad99636df96a11c94284f13dfdbdcc66dd6d0734d228b02692654e7c76f4af8ecaa5e94963db158dfff6665d82bde303b1b10a429c7952fb8d11af40b7d642c259e0a2f9798314d67b426ecd6a22befa27b9f88cf377a2bd8dee0cb8df580ae4c3aed657c3b20786a7c4253cb95f9d4c5b7823ddf015bd1b4f60b505940a416df1f5e40f6d7ae949091986ac6de6be353194123c6216ee6f1656bdddefd29fadddd859dd78dd7fe54338ed9be81ded8e478f64972ebde6a978f468de82ae4fae5861b1a14c0e4e65d020a3c5b3417f7c174ee28cd9cd0cfa086d6d29c2382e487d315a6cf0cb18e01c74941d8eb3a6653e256842dcf3abc2d4ed9c5be6e7b8c86ce0a86ef7c6df73af6f32a77591b7bb9c0f9985a8e4795c3ba29cef59a895dc3cbd0db43ff8c423cb43673714c1ba30e2356b7b2438dfbd20cccb259e76e7bcbc2e1a9a4e9062015c7c33f6fd6064933bc4e107111404f089049afe043cba48f15c7f01dc5fe7ed09da5ff5afe9355eeb22828e6a9a296023211fa7de5f7885d416b5ccba69f092cfc363c587738dfa523cd126b992dfee98b6f74c7708f67d95cfbff656aaa3700a8f946b171874b6e2654430a555d136122b9e08339848beddfbdfb769db1357f5accef4273e6a0043e8e4a7e926b7219e4ffb89dc404db90117ab04e506afa25a968adf95dce306bbf55c2031df3c8ed1a4550206ab296b9fefa0507929c51cd529c019410e59f770afdbfa69b04b600ba216e7dd205bf1aeee36d315025216825f4f78aa7e3941abc2573db9102ffac33753714b51c72bf8fea8f16fc17aea55c08c864d2b73345bad442d0a8d25927cd11d78ae204c023caf22ea7132dd57857a4288abd09397a60891413a9c768a525856d6fa4f77f004d46bf65980182966897e9265c1632a36de5942460d658da46f142b9bca35d7eb05265ab9ce794b310784516f36031e378e5ca37df968216e173873b3220d4855b8cd17f2acdc890a37584767c0d49436f1d9dfdd26f662b8bab2630e68ac6c0637e85212d26fb03b24ec69708a758f4d13441d2bd365c5f918747aa2357ac0ef05c2d50da1c47fc7cf404d1ff43960eb0486df0e5fd34e113df852c780bcb269224117f8b8261b80af67ca394c9c6340817b009021fc6a73ff8911b0d8c6a673062f5808c1f04c7f6754d234e1b70551613185e50b845fd7e21c637df5e3e014f41c3be3e9f0d501bf78830a55dbd811c624dbdefa8f18fa12699c3141acc044b3bcc139fec041cdc98f6b98a4805a25605f903f393d38e631af0d094d8e2f58517897d2a81eb1f9e866118c006d71acdc1c477ebebef25fdbf5888e297ef47aa690390365e6720bbe0cd86ce880e87ae84727a22c1cffaa29ef36a6d046b8baecce8449cdb9c6362c7039d69c62fea8e76e91e4f2c108772261637267080b5f0d199ab7cf5370459d738b8326ec5d263346682aeee7d69b55c783d558b3076ccabbf0ba21a7c8fae0322f913191009b4dca3a4eafd9c46b8c29341a87059d8aeb9650174fc457010edf2eeea3ef729bdf3651273550d1f0c4696b8d5e5d56e4f1b1babfba286979980b6d71c7fd548fe0fe85fc3f49fc7728a755b366578ac648a939de31011168499b041a6a834882abf175e169f98379214acacd5fc08948de51bf61aa1392f962b7fc288c81d9dcac8e8324f84a9b8307510431d812aa10dfb69d7a5c06447c9254a15911c124fd1be7cad589f048ca5284f727e4e885ccd6de90b7ba55738928bc45081a0a8d97043f0491af4b6e355a481c041c744e03df4218605e4df20ffb83d09975853f99bba097942fe0b1878e1136bd807f4215e34b49150767f21df3ad3f44a9fcea09469a9917b0845073ad4330883d9d9738739fdd0cbe6014e957f5a9ce901642b0cef8b2337d05bd7f757981546964ce785eb433f2fbb518914111895fb6bf485b6bd0c00a8308499761fac2ee2e7a5686d108e73e125adaabdee2e0a24fc9981c3159396bda9b8510e15b5becd101065ea203fa37e1b668fade037fbc746521fa8a6446cae5f9eb7515d625e21c7ca6dde8d8726d15cd5c4b0b9a6b5a1db0246045bb8587f9650056e63e95f2f5e215d8b9dd21b995cbbe0249ce2d9bb83f1df61c770dc9f4f33bb52825c592863952ef1fac01bcb05145469b6bd41c719e111a2016b0d72f509dce0584020a1869ffd639e4b40d7a91ec7f84667e2f3e78fa2a5d1afd653207121bfd3a440f9b62b7d6c7dad456c176ca7cf3e729dceb3c467e971584dfddb6d7475abb6800c69b655fda59b07186fd5b4ae3010ca830c69b01bec6df12e", 0x1000}, {&(0x7f0000001200)="07e68c4e6e202be2c03175c8ae1b25bf329d9919bf47f2f05a4510b479717e6b666d502fd6", 0x25}, {&(0x7f0000001240)="d5483a28160792031ac83e00049ffcc53acd585033b2f88b3a73d643980ce19cb4a23bc351400e35f6383708347edef610c97cc6ed4a1b7123474f2514dc1a198767d198f99b6891acd49e1fa5900864e74b1ca2fce9bb32934ef4d148b8d6c3187fc57cbd8b7ed87fc9e6d145e52146005ff6d92d10a074be45ca7afada", 0x7e}, {&(0x7f00000012c0)="baef0d0bd810ced63dd3022a6dd23cb3d670bcdf4ba3dfdb35c4ef48b8e5307c435d108fdd2a7bab5803ad842325e0a28f9cc05cc6c83a23fbc14c50feb3641394015c0af75e31dcfb6d2cb3b54dd95f635110071edd0523874d95c29ce8d2772dc7e4cf7dbe68adcd0441b981990eeecb762ada0643b7612dfa07d1a19c992166789443e17f5f72cc00e5c7ec18d8dfaae138c54c4ed8edda1220d6164a3549adbfb89b90626d4a154f84eed89378d5216b5f47c4fa7093cf6d57e4361766835f7dd90b3acf70c81ce1367d3039d9b49b4a7c642eb64520e2bbe953dd73a118c9d26c5b467a0521c1402e2bcd10fe28e2", 0xf1}], 0x6, &(0x7f0000001a80)=[@rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r2, r3, r4}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @cred={0x18, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r11, r12, r13}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r14, r15, r16}], 0xcc, 0x4081}], 0x1, 0x44000) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:29 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=[&(0x7f0000000300)="46adf56fc8638425b23d0424ca7bd94823b4a7a62bbf002be8b4c58f1021e5b7c9156db4a0b8c52e1843989827b377c04842aa3a26831583b1be984b000afbb2bbac5defd338cadff83ed5daa42bd6b882d573a97dd122ba9356a65bb8e7b1909b8abb1abb105bb5008cd43d8acec065d032adf609da377220"]) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:54:29 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0x2}, 0x8, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)=@ioapic) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000580)) 2018/05/08 18:54:29 executing program 7: socket$rds(0x15, 0x5, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000240)={0x31abfe1d, 0x100, 0x0, 0x100}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001400), 0x2a6, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340), &(0x7f0000000540)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/08 18:54:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2424.837614] ptrace attach of "/root/syz-executor6"[4538] was attempted by "/root/syz-executor6"[5033] 2018/05/08 18:54:30 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) [ 2424.885711] ptrace attach of "/root/syz-executor6"[4538] was attempted by "/root/syz-executor6"[5033] 2018/05/08 18:54:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0x0, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:30 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x2000000108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xc) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/132, &(0x7f0000000280)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"627269646765300000000000000400", 0x22001}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'bridge0\x00\x00 \x00\v\x00'}) 2018/05/08 18:54:30 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) [ 2424.974855] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2425.059575] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2425.094653] device bridge0 left promiscuous mode [ 2425.113806] bridge0: port 2(bridge_slave_1) entered disabled state [ 2425.120285] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.135655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2425.142092] bridge0: port 2(bridge_slave_1) entered listening state [ 2425.148688] bridge0: port 1(bridge_slave_0) entered blocking state [ 2425.155089] bridge0: port 1(bridge_slave_0) entered listening state [ 2425.162547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/05/08 18:54:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0x0, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) 2018/05/08 18:54:30 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:30 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) timer_create(0x1, &(0x7f0000000100)={0x0, 0x38, 0x2, @thr={&(0x7f0000000000)="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", &(0x7f00000001c0)="fb384bde1974118466de9829e5f56cdc9792b55c6c6be78bd1c02ce76bad424d2bcd3da80d3c9f70d071e76f0ee41f1adc14501e7f2c8a6290349bbfe144ae94720af7d3"}}, &(0x7f0000000240)=0x0) timer_delete(r0) 2018/05/08 18:54:30 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x7ff, 0x11, r0, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/05/08 18:54:30 executing program 7: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) 2018/05/08 18:54:30 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=[&(0x7f0000000300)="46adf56fc8638425b23d0424ca7bd94823b4a7a62bbf002be8b4c58f1021e5b7c9156db4a0b8c52e1843989827b377c04842aa3a26831583b1be984b000afbb2bbac5defd338cadff83ed5daa42bd6b882d573a97dd122ba9356a65bb8e7b1909b8abb1abb105bb5008cd43d8acec065d032adf609da377220"]) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:54:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 2018/05/08 18:54:30 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b2f66696c653000"}, 0x6e) 2018/05/08 18:54:30 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x7002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:31 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:31 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:31 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r0, 0x0) dup3(r0, r1, 0x0) 2018/05/08 18:54:31 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') r2 = syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00') sendfile(r2, r1, &(0x7f0000000040), 0x800400000ff) [ 2425.954859] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2426.030495] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8000000000010, &(0x7f00000001c0)="17000000020001000003be8c5ee17688a3000008010300ec1f5a1e1c36030000000000000098fc5ad9485bbb6a8800000000dba67e0600560000000200df018000000000f5009cee4a5acb3da400611fb700670000000000000000000609edffffffffffff02df9eebe7ec7ee87cccebf6ba000840024f0298e9e90554062a80e605007f71174aa9516cbf320ec39f02d47c59cc16198b6026eb4bf7ba2112ce68bf17a6e019b7487067c12f162abd9ce053989d755a753b", 0xb8) 2018/05/08 18:54:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1000, 0x6, 0xe6ac, 0x0, 0xac, 0x8, 0x6, 0x8, 0xa652c0f, 0x8000, 0x8}, 0xb) 2018/05/08 18:54:31 executing program 2: syz_emit_ethernet(0x2c, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:31 executing program 7: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [{[], {0x8100}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, @icmp=@address_request={0x11}}}}}, &(0x7f0000000040)) 2018/05/08 18:54:31 executing program 1: socket$inet(0x11, 0xa, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="1a5c995de302", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}, 0x0) 2018/05/08 18:54:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/08 18:54:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2426.569107] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:31 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) [ 2426.629591] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:31 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000000001400000086dd60f15a6c000f000000000000000000000000ffffffffffffff02000000000000000000000000000100000105000000002e0700000000000000000000000890781312ac4d6ca1"], 0x0) 2018/05/08 18:54:31 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) 2018/05/08 18:54:31 executing program 2: syz_emit_ethernet(0x2c, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x200, 0x6, 0x8, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x1, 0x5, 0x2, 0xfffffffffffffff9, 0x6, 0x0, 0xdc42, 0x1, 0x9, 0xd4, 0x401, 0x2, 0x9, 0x6, 0x401]}, &(0x7f00000000c0)=0x100) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:31 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg(r2, &(0x7f00000034c0)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001780)}}], 0x1, 0x0) 2018/05/08 18:54:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20008801, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/08 18:54:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:32 executing program 2: syz_emit_ethernet(0x2c, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = accept4(r0, &(0x7f0000000280)=@l2, &(0x7f0000000300)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)=0x3, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) r4 = dup2(r0, 0xffffffffffffff9c) ioctl$TIOCSTI(r4, 0x5412, 0x8) [ 2427.168089] bridge0: port 1(bridge_slave_0) entered learning state [ 2427.174608] bridge0: port 2(bridge_slave_1) entered learning state 2018/05/08 18:54:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="ace8060000cacf942f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x1}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xffffffa0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/08 18:54:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000fcfff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000484000)={0x2, 0x4e20}, 0x10) 2018/05/08 18:54:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x24, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/05/08 18:54:32 executing program 2: syz_emit_ethernet(0x2d, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:32 executing program 7: r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) write(r1, &(0x7f000006e000), 0xfffffdd8) write(r1, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe2(&(0x7f0000000300), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 2018/05/08 18:54:32 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000208972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock(&(0x7f00009ff000/0x3000)=nil, 0x3000) 2018/05/08 18:54:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xffffffffffffff7e) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) dup2(r0, r0) 2018/05/08 18:54:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x7403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:32 executing program 6: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x4000000000000002) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)) 2018/05/08 18:54:33 executing program 2: syz_emit_ethernet(0x2d, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000100), 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xff, 0x8000}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x24, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/05/08 18:54:33 executing program 1: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x40000000000005, 0x8972, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x270, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2427.950668] validate_nla: 2 callbacks suppressed [ 2427.950676] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:33 executing program 2: syz_emit_ethernet(0x2d, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, [0x1]}) 2018/05/08 18:54:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x2000001, 0x7317}) 2018/05/08 18:54:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) write$fuse(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) 2018/05/08 18:54:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x24, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/05/08 18:54:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/158, 0x9e) recvmmsg(r0, &(0x7f0000003980)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/232, 0xe8}], 0x2, &(0x7f00000004c0)=""/186, 0xba, 0x400}, 0x7f}, {{&(0x7f0000000580)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000600)}, {&(0x7f0000000640)=""/237, 0xed}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/199, 0xc7}, {&(0x7f0000001840)=""/79, 0x4f}, {&(0x7f00000018c0)}, {&(0x7f0000001900)=""/218, 0xda}, {&(0x7f0000001a00)=""/231, 0xe7}], 0x8, &(0x7f0000001b40)=""/108, 0x6c, 0x2}}, {{&(0x7f0000001bc0)=@un=@abs, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001c40)=""/44, 0x2c}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/241, 0xf1}, {&(0x7f0000002d80)=""/103, 0x67}], 0x4, &(0x7f0000002e40)=""/135, 0x87, 0x7c0}}, {{&(0x7f0000002f00)=@can, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002f80)=""/165, 0xa5}, {&(0x7f0000003040)=""/148, 0x94}, {&(0x7f0000003100)=""/171, 0xab}, {&(0x7f00000031c0)=""/184, 0xb8}, {&(0x7f0000003280)=""/18, 0x12}, {&(0x7f00000032c0)=""/77, 0x4d}, {&(0x7f0000003340)=""/248, 0xf8}, {&(0x7f0000003440)=""/57, 0x39}, {&(0x7f0000003480)=""/45, 0x2d}], 0x9, 0x0, 0x0, 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003540)=""/181, 0xb5}, {&(0x7f0000003600)=""/141, 0x8d}, {&(0x7f00000036c0)=""/77, 0x4d}, {&(0x7f0000003740)=""/48, 0x30}, {&(0x7f0000003780)=""/240, 0xf0}, {&(0x7f0000003880)=""/71, 0x47}], 0x6, &(0x7f0000003940)=""/3, 0x3, 0x8000}, 0x1}], 0x5, 0x20, &(0x7f0000003a40)={0x77359400}) getsockname$inet6(r1, &(0x7f0000003a80)={0x0, 0x0, 0x0, @local}, &(0x7f0000003ac0)=0x1c) 2018/05/08 18:54:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x34e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) 2018/05/08 18:54:34 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0x0, 0x0, [0x1]}) 2018/05/08 18:54:34 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x0, 0x0) io_setup(0x81, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f00000022c0)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x1}]) 2018/05/08 18:54:34 executing program 6: syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000080)) fcntl$setpipe(r1, 0x407, 0x0) 2018/05/08 18:54:34 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 2018/05/08 18:54:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2429.216076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2429.222674] bridge0: topology change detected, propagating [ 2429.228456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2429.234981] bridge0: topology change detected, propagating [ 2429.240948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 2018/05/08 18:54:34 executing program 1: r0 = socket(0x2, 0x3, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000c40)={&(0x7f0000000600)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000980), 0x0, &(0x7f0000000b00)}, 0x40014) 2018/05/08 18:54:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:54:34 executing program 1: r0 = socket(0x2, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x800}, &(0x7f0000000040)=0x8) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)) [ 2429.375980] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:35 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/08 18:54:35 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0x0, 0x0, [0x1]}) 2018/05/08 18:54:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_bt(r1, 0x541b, &(0x7f0000000040)="b773dc0a53d147565966f73b4120de3d7e27a843ec13bfaf5e4d717d415c6dd7a7982bc5f501543a5c2d436d710934d8ae9d2435f73b5f8c80e36be6145f9e84bda231e717fbee49daa12ee302881ed9a4e825ccf06a7e989689088a27d0ff5e857405059eb897a166932a718ed6553a7770f8ecd7b75f26877f9e4e662d8b3c5121325a9537586e8a3db944af9e7f8b3f3cb15f8f380097b5176e8c20a28d5074e046af50edea1eb9983fe76d773fa92a2258f464bdd7faea7842cfc9ea12") ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x7, 0x3ff, 0x5, 0x401, 0x7, [{0x4c7, 0x1f, 0x0, 0x0, 0x0, 0x800}, {0x9f1d, 0x1, 0xad3b}, {0x40, 0xfffffffffffffff7, 0x3}, {0x4, 0x8, 0x7, 0x0, 0x0, 0x400}, {0x100000001, 0xfff, 0x7, 0x0, 0x0, 0x1000}, {0x1, 0xae, 0x5, 0x0, 0x0, 0x2002}, {0x6, 0xffffffffffff8000, 0x5, 0x0, 0x0, 0x600}]}) 2018/05/08 18:54:35 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="6215410772f8", [], {@generic={0x800, "ed787cbb1cbd0619ee6bce7312840d12615e290f"}}}, &(0x7f00000e7fec)) 2018/05/08 18:54:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x18, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/05/08 18:54:35 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0xa) io_setup(0x100000002, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f000052afd8)=[&(0x7f000076f000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f000066efb6), 0xffffff85}]) 2018/05/08 18:54:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x400000000f, &(0x7f000048dffc)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000e000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000014ffc)=0x80000001, 0x4) bind$inet6(r0, &(0x7f0000f31000)={0xa, 0x4e20}, 0x1c) 2018/05/08 18:54:35 executing program 1: r0 = socket(0x10, 0x100000000000803, 0x0) write(r0, &(0x7f0000424000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) close(r0) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x263, 0x0) 2018/05/08 18:54:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:35 executing program 6: r0 = socket(0x2, 0x3, 0x6) getsockname$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x14) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)) 2018/05/08 18:54:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2430.380092] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 2430.415242] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x18, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) [ 2430.464998] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2430.531077] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/05/08 18:54:36 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0x0, 0x0, [0x1]}) 2018/05/08 18:54:36 executing program 7: r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="220000001e0007fffc011c0f0900ffa7001aadc2215000000000d20d00000000fb00", 0x22) 2018/05/08 18:54:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:36 executing program 6: clone(0x0, &(0x7f0000000180), &(0x7f00006c3ffc), &(0x7f0000000040), &(0x7f0000000000)) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='lo#]ppp1vmnet1@{security-\x00', 0x0) 2018/05/08 18:54:36 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x401) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000080)) 2018/05/08 18:54:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x359}], 0x2000000000000186) 2018/05/08 18:54:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x18, 0x24, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/05/08 18:54:36 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) 2018/05/08 18:54:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x6c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 2431.220197] netlink: 6 bytes leftover after parsing attributes in process `syz-executor7'. [ 2431.229556] netlink: 6 bytes leftover after parsing attributes in process `syz-executor7'. [ 2431.239410] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/05/08 18:54:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x42182, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x0) [ 2431.329666] netlink: 6 bytes leftover after parsing attributes in process `syz-executor7'. [ 2431.338308] netlink: 6 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/08 18:54:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x90480, 0x0) 2018/05/08 18:54:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa2830007a6000000000900000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/05/08 18:54:36 executing program 6: clone(0x20004000, &(0x7f0000000280), &(0x7f0000c53000), &(0x7f0000f8b000), &(0x7f00000001c0)) 2018/05/08 18:54:36 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe}) [ 2431.493667] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2431.514866] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1) fstat(r0, &(0x7f00000001c0)) 2018/05/08 18:54:37 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002500fd060000000000000000040000004be2b6927513708c5a6702f26638f828a09e29dc208cb1f7f2d196fef5285a8ce70d99a549e2c9f1395ba189186d75ac7ad6424a6fe38ccde5d52a8e46"], 0x1}, 0x1}, 0x0) 2018/05/08 18:54:37 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x12280, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0xf000, 0xe000}) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x84b6, 0x7, 0x5c, 0x5, 0x632, 0x10001, 0x100000000, 0x5, 0x3, 0x0, 0x1, 0x7}, {0x7fffffff, 0xffff, 0x10000, 0xfffffffffffffffc, 0x3, 0x85, 0x67, 0x2, 0x5, 0x3, 0x5, 0x6, 0x5}, {0x7, 0x1000, 0xfffffffffffff800, 0x100000001, 0x51c2, 0x8ca, 0x5, 0x40, 0x8, 0x7, 0xffffffff, 0x2, 0x4e}], 0x6}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20}, 0x10) 2018/05/08 18:54:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:37 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe}) 2018/05/08 18:54:37 executing program 7: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200100, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2018/05/08 18:54:37 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="cd390b011bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}, 0x0) 2018/05/08 18:54:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0xa) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) [ 2432.571744] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:37 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00007ddff4)) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0xffffffff, &(0x7f0000e1d000), 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4}) 2018/05/08 18:54:37 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f0000000100)={0xfffffffffffffffe}) 2018/05/08 18:54:37 executing program 4: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) fstatfs(r0, &(0x7f0000000040)=""/247) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, &(0x7f0000000000), 0x1bd) 2018/05/08 18:54:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') 2018/05/08 18:54:37 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x200000010) write(r0, &(0x7f0000412fd6)="29000000140007b7ffffffff0300e0eb01001000e0a40e07fff00f06000000ffff0100002a00f3ff09", 0x29) 2018/05/08 18:54:37 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)={0x0, {{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, [{{0x2, 0x0, @loopback=0x7f000001}}, {{0x2, 0x0, @rand_addr}}]}, 0x190) 2018/05/08 18:54:37 executing program 0: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_flags=0x2}) 2018/05/08 18:54:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x34]}, 0x1) 2018/05/08 18:54:38 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 2018/05/08 18:54:38 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000026c0)=[{{&(0x7f0000002440)=@ax25, 0x80, &(0x7f0000002680), 0x0, 0x0, 0x0, 0xad3}, 0x9}], 0x1, 0x40000000, &(0x7f0000002800)={0x0, 0x1c9c380}) 2018/05/08 18:54:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280)="92", 0x1, 0x20000015, &(0x7f0000000300)={0x2, 0x4e23}, 0x10) 2018/05/08 18:54:38 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x40) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x6}) timerfd_gettime(r0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000300), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, 0x1000000) 2018/05/08 18:54:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xb803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:38 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720aefff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) [ 2433.028394] validate_nla: 1 callbacks suppressed [ 2433.028404] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2433.091924] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:38 executing program 2: clone(0x200, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000dacfc9)) mknod(&(0x7f0000000440)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000400), &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x793, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x27e, 0x0) 2018/05/08 18:54:38 executing program 6: clone(0x4000000000200, &(0x7f00000006c0), &(0x7f0000c53000), &(0x7f0000f8b000), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f0000000040)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/05/08 18:54:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) getsockname(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x4a0000) ioctl$KVM_SMI(r1, 0xaeb7) 2018/05/08 18:54:38 executing program 1: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fe9602990fffffffffb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e0003697b93d32112b2bc83d72a"}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000800)) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000180)=0x200, 0xfffffffffffffedd) 2018/05/08 18:54:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'bridge0\x00', 0xffffffffbffffffe}) r2 = dup(r1) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'team0\x00', 0x400}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x1}) 2018/05/08 18:54:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x5450, &(0x7f0000ec6fb0)) 2018/05/08 18:54:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xff01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:38 executing program 7: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/08 18:54:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:38 executing program 1: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fe9602990fffffffffb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e0003697b93d32112b2bc83d72a"}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000800)) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0x200, 0xfffffffffffffedd) [ 2433.766996] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000100)) 2018/05/08 18:54:39 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000074b000)={@local={0xfe, 0x80, [], 0xaa}, 0x800, 0x1}, 0x20) 2018/05/08 18:54:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2433.858172] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2433.874699] device bridge0 left promiscuous mode 2018/05/08 18:54:39 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000800)) 2018/05/08 18:54:39 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:39 executing program 0: request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)=':self%cpuset^*}%GPLnodev\x00', 0xfffffffffffffffe) 2018/05/08 18:54:39 executing program 7: epoll_create1(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0), 0xfffffeae) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x7ff}, &(0x7f0000000d80)=0xc) 2018/05/08 18:54:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010500000000000000000a00000000000000000000001400050000000000000000000000000000030001"], 0x1}, 0x1}, 0x0) 2018/05/08 18:54:39 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 2018/05/08 18:54:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000340)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) 2018/05/08 18:54:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:39 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="f5", 0x1, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0x0, 0x0) 2018/05/08 18:54:39 executing program 0: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000600)) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000640)) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x581]}, &(0x7f00000003c0)=0x100) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x4, 0x70bd27, 0x25dfdbfc, {0x5}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xb4474b6316331b77}, 0x94) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:39 executing program 1: epoll_create1(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) r1 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00'}) 2018/05/08 18:54:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2434.841555] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:40 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r1, &(0x7f0000057fa0), 0xfffffeae) close(r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000fe0)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x3, 0x800, 0x1fa, 0x148, 0x74, 0x135}, "30a771b9ff76bda004be8d4fb00a8815387f33bc6b62c080150253620fdb8ffa46748606487f99a09ea90646a0f7104a59b06cf45697e9a9e31b7e70640e487e9c071aa883f068e1bca1fc0e97a92f1810c75079ce425ae914cbffbc02101611f016c0cdf83d7ab7d7bd2abdaef1f429d4741101504b3f8be8087a39c7ca341b2bd396942b7e5b576d8e5f8e8dba7b167c0def6d9ba2f4c7a23e3e11128e729141a24e9456834f5f175256d68fbd2452af1e181d9db27e5c56a62e505b10042bd592c38e9296177116f3271f7686ba6f1695fde435e4ef80e250e2c360233e095e0cbac0eb79ea8000d17d59f6c4e03b834a0e53022f", [[], [], [], [], [], []]}, 0x716) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d40)={r3, 0x7ff, 0x30}, &(0x7f0000000d80)=0xc) 2018/05/08 18:54:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000040)=@req) 2018/05/08 18:54:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 2018/05/08 18:54:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x3) r1 = gettid() ptrace$getenv(0x4201, r1, 0x100000000, &(0x7f0000000040)) sched_getparam(r1, &(0x7f0000000000)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) 2018/05/08 18:54:41 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x0, 0x2}, 0x14b) 2018/05/08 18:54:41 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') 2018/05/08 18:54:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) 2018/05/08 18:54:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) 2018/05/08 18:54:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:41 executing program 1: r0 = memfd_create(&(0x7f0000000240)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000280), 0xb512) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) 2018/05/08 18:54:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa2830007a6008000000000000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={@loopback={0x0, 0x1}}, 0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@nfc, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/240, 0xf0}, 0x0) 2018/05/08 18:54:41 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r0, &(0x7f0000000000)=""/202, 0xca, 0x100000000000040) [ 2435.887173] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 2435.894642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/08 18:54:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2435.944719] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) [ 2435.991842] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 2435.999378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 2436.012886] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0xd00c1, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2) 2018/05/08 18:54:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xcf030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:41 executing program 0: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000060cff8)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) 2018/05/08 18:54:41 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x8) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0xbd, [], 0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/189}, &(0x7f0000000100)=0x78) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'lblc\x00'}, 0x2c) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000140)='\x00') 2018/05/08 18:54:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) 2018/05/08 18:54:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)) mmap(&(0x7f0000ca8000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000040)=[0x0]}}], 0x0, 0x0, &(0x7f0000000400)}) 2018/05/08 18:54:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001400)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe49, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) connect(r0, &(0x7f00003cd000)=@ethernet, 0x10) 2018/05/08 18:54:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2436.231205] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2436.347007] binder: 5545:5551 got transaction with invalid offset (0, min 0 max 0) or object. [ 2436.383406] binder: 5545:5551 transaction failed 29201/-22, size 0-8 line 3034 [ 2436.431530] binder: BINDER_SET_CONTEXT_MGR already set [ 2436.437111] binder_alloc: 5545: binder_alloc_buf, no vma [ 2436.442668] binder: 5545:5554 transaction failed 29189/-3, size 0-8 line 2971 [ 2436.447089] binder: 5545:5551 ioctl 40046207 0 returned -16 [ 2436.470520] binder: undelivered TRANSACTION_ERROR: 29189 [ 2436.476327] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/08 18:54:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cb0000/0x4000)=nil, 0x4000, 0x2000003, 0x32, 0xffffffffffffffff, 0x4000) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x4000000000d, 0x9, 0x7ffffffa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x5, 0x857, 0x20, 0xffffffffffffffff, 0xfb1}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00001fb000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000600)="18f4241a85f57141ebf0f7ac134ffffc08cb0c2c39afe40063fbb19820d04ff30f8dcb76", 0x24, 0x0, &(0x7f0000601000)={0x11, 0xc, r3, 0x1, 0x100000200020, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0x14) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r0, &(0x7f0000002900)=@can, &(0x7f0000752ffc)=0x80, 0x2000000000000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) readv(r5, &(0x7f0000002800)=[{&(0x7f0000001480)=""/112, 0x70}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/76, 0x4c}, {&(0x7f0000002700)=""/195, 0xc3}, {&(0x7f0000000040)}], 0x5) sendto$inet(r4, &(0x7f00000000c0)="1a6e79839bba29e2249104d8794cb4b73fef9d9a4231ee6cf9f7f6f8a68090e470f945debf4db93bebd3dd6f1524bd25c09c221c8857fed41b6604a4ed745e6559", 0x41, 0x4000000, 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000b76fc8)={&(0x7f0000715000)={0x10}, 0xc, &(0x7f000066f000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x172}, 0x1}, 0x0) sendmmsg(r5, &(0x7f000000b880), 0x353, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000002880), &(0x7f00000028c0)=0x8) fcntl$getown(r2, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000440)="6c696d0d313103512a54b8a190964a4200908900000000000000000000") ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/229) dup3(0xffffffffffffffff, r5, 0x80000) shutdown(r4, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000001c0)={'ip_vti0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x80000000000005) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000352401040326033cb2ff2ea6dc23b0f61f18262484c936600000ffff007a23d15f52a18c5a"], &(0x7f0000000400)=0x1) r8 = gettid() syz_open_procfs(r8, &(0x7f0000000180)="fa6c0a9c290f") ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000340)) fdatasync(r0) fchdir(r5) 2018/05/08 18:54:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:42 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @dev, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @remote={0xac, 0x14, 0x14, 0xbb}, r1}, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f000010bfc8)={0x0, 0x0, &(0x7f0000a8fff0)={&(0x7f0000e16000)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffffffffffff9a}]}, 0x18}, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x3a}], 0x172) 2018/05/08 18:54:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000000aff8)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) dup2(r1, r0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000528000), 0x1) setrlimit(0xc, &(0x7f0000223000)) 2018/05/08 18:54:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) 2018/05/08 18:54:42 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x40080, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffef3, 0xf00, 0x0, 0xfd69) 2018/05/08 18:54:42 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000940)}], 0x1, 0x0) 2018/05/08 18:54:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) 2018/05/08 18:54:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:42 executing program 7: epoll_create1(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0), 0xfffffeae) close(r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000fe0)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x7ff, 0x30}, &(0x7f0000000d80)=0xc) 2018/05/08 18:54:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x32d) r1 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x2000010000054) 2018/05/08 18:54:42 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={&(0x7f0000000140), &(0x7f0000000180)}}, &(0x7f00000000c0)) 2018/05/08 18:54:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:42 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) 2018/05/08 18:54:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) 2018/05/08 18:54:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 2018/05/08 18:54:43 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast2={0xff, 0x2, [], 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) 2018/05/08 18:54:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 2018/05/08 18:54:43 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc0000, 0x0) sync_file_range(r0, 0x20, 0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0xfff, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffd}}}, 0x84) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) set_thread_area(&(0x7f00000000c0)={0x1, 0x20001800, 0x0, 0xffff, 0x20, 0x3ff, 0x358, 0x101, 0x7, 0x4}) 2018/05/08 18:54:43 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1001}) 2018/05/08 18:54:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xab8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x1, 0x218, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'bond0\x00', 'irlan0\x00', 'rose0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb0, 0x110, 0x188, [@statistic={'statistic\x00', 0x18}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "8c0728fcf83b267d5a78e4cdf9599c66e75940fdf49d1582730b320a7f21cc0a371318aa713fb27ce3cc6223ea586a3c3b7b87cc05f2665a12cffff501e5e814"}}}}]}]}, 0x248) 2018/05/08 18:54:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2438.394938] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/08 18:54:43 executing program 6: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000), 0x4) 2018/05/08 18:54:43 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) getpeername(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) 2018/05/08 18:54:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:43 executing program 5: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) 2018/05/08 18:54:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 2018/05/08 18:54:43 executing program 1: r0 = memfd_create(&(0x7f00000005c0)="6465762046a80d01bed3c1e1c85fe2dbef94a677a99248217280a42d688043cc913ddb112187ee23355083fc8a1eed8f3d1a468b405da49550403420a5685e12afb758b1bfcf91d09bfe61b023e1b04f2f8e23a38e1ef575997d875079d8275500cf932de25ff116808e0097e9a30f89ffec73d758337ba4ecfe26e0709dceb3bc100af911f29826293f7e6d4cbbb7fa03189e2fd5b9461150c1f6c46be2eddd2f84ce8136164ee052fdf7c5919654885d693f6c70f42b0eef3f33160056b93855cb84bf62730fd9afe77c1b8d7b0b9dcc2a7566f6067be13c15bbbc440e796acc56b204c7f48fcdfa2e84e52a95", 0x0) write(r0, &(0x7f0000000040)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="16", 0x1}, {&(0x7f0000000280)="d44a5147e582bf7c8b662930a6db049c07c75db295ffde23b1cec9a5", 0x1c}], 0x2, 0x0, 0x0, 0x10}, 0x81) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) munlock(&(0x7f0000315000/0x3000)=nil, 0x3000) 2018/05/08 18:54:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x9, 0x30}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r4, 0x80000000}, &(0x7f00000002c0)=0x8) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r2, r3/1000+30000}, {0x77359400}}, 0x100) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)=""/55, &(0x7f00000001c0)=0x37) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x100000001, 0x9, 0x400], 0x3, 0x2164, 0x0, 0x6, 0x7488, 0xffffffff, {0x4, 0xfffffffffffff063, 0x8000, 0x4, 0xe7, 0x10001, 0x3ff, 0x4, 0x453, 0x9, 0x6, 0xfffffffffffffffb, 0x80000001, 0x3, "bbf12d695e728aac56b0dcd33efe4be7daf2bab33940360d54d39dc238eff011"}}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300)={0x1}, 0x4) 2018/05/08 18:54:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000fd7fb8), 0x0, &(0x7f00003d1000)={0x0, 0x989680}, &(0x7f0000000000), 0x8) [ 2438.447517] validate_nla: 1 callbacks suppressed [ 2438.447526] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2438.479338] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xd003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000065e000)=ANY=[@ANYBLOB="c40000001900cdf20000000000000000ffffffff000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000020000008e5f6d98"], 0x3}, 0x1}, 0x0) 2018/05/08 18:54:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080003000100ff07ffdf00", 0x1f) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/05/08 18:54:43 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2018/05/08 18:54:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xe801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}], 0x1) [ 2438.752871] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 2438.774168] Unknown ioctl -1066900319 [ 2438.792843] Unknown ioctl -1066900319 2018/05/08 18:54:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r0, &(0x7f0000007c00)=[{{&(0x7f0000000480)=@rc={0x1f}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)}}, {{&(0x7f0000001b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}}}, 0x80, &(0x7f0000003f80), 0x0, &(0x7f0000004000)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 2018/05/08 18:54:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) recvmsg(r0, &(0x7f0000001540)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/75, 0x4b}], 0x6, &(0x7f0000001440)=""/207, 0xcf, 0x8}, 0x2000) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) [ 2438.809722] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/05/08 18:54:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0xc812, r0, 0x0) 2018/05/08 18:54:44 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f6578650000000c05901caf02d9543cb25ad3b3a5efdc02a232b8000000") fgetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000000), 0x256) 2018/05/08 18:54:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}], 0x1) 2018/05/08 18:54:44 executing program 5: io_setup(0xc36d, &(0x7f0000000280)=0x0) io_destroy(r0) [ 2438.900376] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 2438.931517] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 2439.010738] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @loopback=0x7f000001}, 0x6}) 2018/05/08 18:54:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x9002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:44 executing program 0: r0 = eventfd2(0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/05/08 18:54:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000002c0)) 2018/05/08 18:54:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}], 0x1) 2018/05/08 18:54:44 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 2018/05/08 18:54:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0xa0000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5, 0xa6a, 0x4}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x400}, 0x8) 2018/05/08 18:54:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x400) write(r0, &(0x7f0000000000), 0x0) 2018/05/08 18:54:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x12030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2439.922346] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 2439.941853] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:45 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x8) perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'lblc\x00'}, 0x2c) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000140)='\x00') setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), 0x4) seccomp(0x0, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) 2018/05/08 18:54:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) 2018/05/08 18:54:45 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 2018/05/08 18:54:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x10001, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/08 18:54:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1=0xe0000001, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) dup3(r0, r1, 0x0) 2018/05/08 18:54:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d00150000003a514692d14c81", 0x29}], 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000009480)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000094c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000095c0)=0xe8) recvmmsg(r0, &(0x7f000000e300)=[{{&(0x7f0000009600)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000009800)=[{&(0x7f0000009680)=""/151, 0x97}, {&(0x7f0000009740)=""/150, 0x96}], 0x2, &(0x7f0000009840)=""/17, 0x11, 0x3}, 0x3ff}, {{&(0x7f0000009880)=@alg, 0x80, &(0x7f0000009b80)=[{&(0x7f0000009900)=""/133, 0x85}, {&(0x7f00000099c0)=""/42, 0x2a}, {&(0x7f0000009a00)=""/114, 0x72}, {&(0x7f0000009a80)=""/41, 0x29}, {&(0x7f0000009ac0)=""/149, 0x95}], 0x5, 0x0, 0x0, 0x80000001}, 0x8}, {{&(0x7f0000009bc0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000009d40)=[{&(0x7f0000009c40)=""/209, 0xd1}], 0x1, &(0x7f0000009d80)=""/4096, 0x1000, 0xfffffffffffff803}, 0x7}, {{&(0x7f000000ad80)=@vsock, 0x80, &(0x7f000000b200)=[{&(0x7f000000ae00)=""/159, 0x9f}, {&(0x7f000000aec0)=""/89, 0x59}, {&(0x7f000000af40)=""/117, 0x75}, {&(0x7f000000afc0)=""/244, 0xf4}, {&(0x7f000000b0c0)=""/21, 0x15}, {&(0x7f000000b100)=""/24, 0x18}, {&(0x7f000000b140)=""/168, 0xa8}], 0x7, 0x0, 0x0, 0x5}, 0x2}, {{&(0x7f000000b240)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f000000c840)=[{&(0x7f000000b2c0)=""/4096, 0x1000}, {&(0x7f000000c2c0)=""/240, 0xf0}, {&(0x7f000000c3c0)=""/154, 0x9a}, {&(0x7f000000c480)=""/246, 0xf6}, {&(0x7f000000c580)=""/63, 0x3f}, {&(0x7f000000c5c0)=""/204, 0xcc}, {&(0x7f000000c6c0)=""/255, 0xff}, {&(0x7f000000c7c0)=""/104, 0x68}], 0x8, &(0x7f000000c880)=""/67, 0x43, 0x900}, 0x1ff}, {{&(0x7f000000c900)=@nfc, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c980)=""/95, 0x5f}], 0x1, &(0x7f000000ca40)=""/40, 0x28, 0x1a75}, 0x100000001}, {{0x0, 0x0, &(0x7f000000cbc0)=[{&(0x7f000000ca80)=""/140, 0x8c}, {&(0x7f000000cb40)=""/74, 0x4a}], 0x2, 0x0, 0x0, 0x10000}, 0x20ee}, {{&(0x7f000000cc00)=@pppoe, 0x80, &(0x7f000000dd80)=[{&(0x7f000000cc80)=""/4096, 0x1000}, {&(0x7f000000dc80)=""/242, 0xf2}], 0x2, &(0x7f000000ddc0)=""/165, 0xa5, 0x80000001}, 0x401}, {{&(0x7f000000de80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000000e2c0)=[{&(0x7f000000df00)=""/191, 0xbf}, {&(0x7f000000dfc0)=""/152, 0x98}, {&(0x7f000000e080)=""/31, 0x1f}, {&(0x7f000000e0c0)=""/197, 0xc5}, {&(0x7f000000e1c0)=""/222, 0xde}], 0x5, 0x0, 0x0, 0xc580}, 0xaed1}], 0x9, 0x2, &(0x7f000000e440)={0x77359400}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000e480)={0x0, @empty, @dev}, &(0x7f000000e4c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000e500)={0x0, @rand_addr, @dev}, &(0x7f000000e540)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000e5c0)={'bond_slave_0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x8001, 0x3812, 0x7, 0x1, 0x8, 0x800, 0xffffffffffffb5a7, 0xd560]}) getsockname$packet(0xffffffffffffffff, &(0x7f000000e600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000000e640)=0x14) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000013b40)=[{{&(0x7f000000e680)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000010a00)=[{&(0x7f000000e700)=""/9, 0x9}, {&(0x7f000000e740)=""/4096, 0x1000}, {&(0x7f000000f740)=""/175, 0xaf}, {&(0x7f000000f800)=""/4096, 0x1000}, {&(0x7f0000010800)=""/187, 0xbb}, {&(0x7f00000108c0)=""/179, 0xb3}, {&(0x7f0000010980)=""/98, 0x62}], 0x7, &(0x7f0000010a40)=""/172, 0xac, 0x100000001}, 0x2}, {{0x0, 0x0, &(0x7f0000010e80)=[{&(0x7f0000010b00)=""/193, 0xc1}, {&(0x7f0000010c00)=""/114, 0x72}, {&(0x7f0000010c80)=""/174, 0xae}, {&(0x7f0000010d40)=""/149, 0x95}, {&(0x7f0000010e00)=""/65, 0x41}], 0x5, &(0x7f0000010ec0)=""/223, 0xdf, 0x8}, 0x4}, {{&(0x7f0000010fc0)=@can={0x0, 0x0}, 0x80, &(0x7f00000111c0)=[{&(0x7f0000011040)=""/164, 0xa4}, {&(0x7f0000011100)=""/121, 0x79}, {&(0x7f0000011180)=""/15, 0xf}], 0x3, &(0x7f0000011200)=""/90, 0x5a, 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000013740)=[{&(0x7f0000011280)=""/252, 0xfc}, {&(0x7f0000011380)=""/177, 0xb1}, {&(0x7f0000011440)=""/69, 0x45}, {&(0x7f00000114c0)=""/101, 0x65}, {&(0x7f0000011540)=""/178, 0xb2}, {&(0x7f0000011600)=""/227, 0xe3}, {&(0x7f0000011700)=""/57, 0x39}, {&(0x7f0000011740)=""/4096, 0x1000}, {&(0x7f0000012740)=""/4096, 0x1000}], 0x9, &(0x7f00000137c0)=""/124, 0x7c, 0x8}, 0x80000000}, {{&(0x7f0000013840)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000013b00)=[{&(0x7f00000138c0)=""/112, 0x70}, {&(0x7f0000013940)=""/158, 0x9e}, {&(0x7f0000013a00)=""/182, 0xb6}, {&(0x7f0000013ac0)=""/5, 0x5}], 0x4, 0x0, 0x0, 0x8}, 0x40}], 0x5, 0x10040, &(0x7f0000013c00)) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000013c40)={@multicast1, @remote, 0x0}, &(0x7f0000013c80)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000013d00)={'ip6tnl0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000013d40)={@local, 0x0}, &(0x7f0000013d80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000013dc0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000014600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000014640)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000014740)={0x0, @local, @dev}, &(0x7f0000014780)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000147c0)={'irlan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000014800)={0x0, @multicast2, @multicast2}, &(0x7f0000014840)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000014fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000280}, 0xc, &(0x7f0000014f80)={&(0x7f0000014880)={0x6fc, r1, 0x508, 0x70bd2d, 0x25dfdbfc, {0x2}, [{{0x8, 0x1, r2}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xd6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4c, 0x4, [{0x4, 0x7fff, 0x5, 0xff}, {0x9, 0x7, 0x6, 0x9}, {0x7, 0x0, 0x8, 0x7fffffff}, {0x7, 0x4, 0x1, 0x3ff}, {0x2, 0x1, 0x1a48}, {0x2, 0xfffffffffffffff7, 0x6, 0x9d}, {0x9, 0x1, 0xfffffffffffff010}, {0x5, 0x8ef, 0x7, 0x4}, {0xcfc, 0x400, 0xff, 0x49c6}]}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r6}, {0x104, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4931b20}}}]}}, {{0x8, 0x1, r7}, {0x20c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x8, 0x37, 0x8e, 0x200}, {0x7, 0x8, 0x6, 0xfffffffffffffe01}, {0x6a1, 0x8, 0x8000, 0x9}, {0x1ff, 0x1, 0x2, 0x3}, {0x5bba, 0xfffffffffffffffc, 0x8, 0x200}, {0x8, 0x11b, 0x0, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xebeb}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xc4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0xb8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xda}}}]}}]}, 0x6fc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005) 2018/05/08 18:54:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2440.700671] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000003040)='fou\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) getgid() getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f00004aaf10)=""/240, &(0x7f00009ceffc)=0xf0) 2018/05/08 18:54:45 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) [ 2440.785118] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xd0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/05/08 18:54:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x3f4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/05/08 18:54:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000735000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x40) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000c0e000), 0x4) signalfd4(r1, &(0x7f0000000100), 0x8, 0x800) inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000fc8)={&(0x7f0000238ff8)=@abs, 0x6e, &(0x7f0000008000), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b221000000000000010000000100000060eb508b37db31094694c773a89c52a43499696a3296793b180241677f539ea821634ebe26deb3b1b5b88abcd45c704d5e2ad92bd9ee27d36a76f981088a9bacb5293ed2a40a06b67e2535f9e185c2f58a893613f7dcb9053e8c0a2d7e21f0ea65d0be305338fb7165c4b2f809815045d072eb63fc164a857e7d8b09623562cb5d56ad348797adbbe1"], 0x99}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f000000c000), 0x0, 0xfffffffffffffffd}, 0x40000100) pselect6(0x40, &(0x7f0000cc8fc0), &(0x7f0000cc8fc0), &(0x7f00000ddfc0)={0xffffffffffffffe1}, &(0x7f00008e5ff0)={0x0, 0x989680}, &(0x7f0000204ff0)={&(0x7f0000cc8ff8), 0x8}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000978ffc)) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000064f000)={0x0, @multicast2, @loopback}, &(0x7f000070fffc)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000aca000)={r4, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000fea)='net/ip_tables_targets\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000000)=0x80000000, 0x4) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r6, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r6, 0x0) recvfrom$packet(r5, &(0x7f0000000040)=""/116, 0x74, 0x0, &(0x7f00000000c0)={0x11, 0xf7, r4, 0x1, 0xd2, 0x6, @random="7304c536b0ad"}, 0x14) dup2(r7, r6) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000f49000)=""/4096, &(0x7f000022affc)=0x1000) clock_settime(0x6, &(0x7f0000116ff0)) r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x8200, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000056ff8)) dup3(r7, r3, 0x80000) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000528000)={0x80000001}, 0x1) setrlimit(0xc, &(0x7f0000223000)={0x4, 0x200}) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0xbe, 0x7, 0x2}) 2018/05/08 18:54:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00fe8000000000000000000008000000000000000100000000000000000000000000000004bd902be0799a2ecc83ff9c02e83b4ea17270dcc69564be5946c5557a1068d24b8b4080f5a32687a0449427aad37dfe0e54a27e23bd524aaa7183d08e7f0f70a40e9da9c86c4ecaecdaa692635839e410b5c0861593098cb8e328c9d6096f82b61de6cceb9988faf316ae0efbd548e875e0ca58fdffba9c6bf591ca372684da44b4703632d88933c6f8f189ef1055ff47808b7c8567d757ad3098ed271355be73e917855c6b52181488119f0142623ad5"], 0xe8}, 0x1}, 0x0) 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:46 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000de6fd6)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/08 18:54:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000cdff0)=[{&(0x7f00003e9000)="290000001c0055fcffffffffffffff0002000400000000000000010009000100000e010091645aff27", 0x29}], 0x1) 2018/05/08 18:54:46 executing program 1: io_setup(0x3, &(0x7f0000000740)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000d83f60)=[{}, {}], &(0x7f0000000000)={0x4000000000001, 0x7}) r1 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) io_destroy(r0) 2018/05/08 18:54:46 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/81, &(0x7f0000000040)=0x51) 2018/05/08 18:54:46 executing program 4: r0 = memfd_create(&(0x7f00000005c0)="6465762046a80d01bed3c1e1c85fe2dbef94a677a99248217280a42d688043cc913ddb112187ee23355083fc8a1eed8f3d1a468b405da49550403420a5685e12afb758b1bfcf91d09bfe61b023e1b04f2f8e23a38e1ef575997d875079d8275500cf932de25ff116808e0097e9a30f89ffec73d758337ba4ecfe26e0709dceb3bc100af911f29826293f7e6d4cbbb7fa03189e2fd5b9461150c1f6c46be2eddd2f84ce8136164ee052fdf7c5919654885d693f6c70f42b0eef3f33160056b93855cb84bf62730fd9afe77c1b8d7b0b9dcc2a7566f6067be13c15bbbc440e796acc56b204c7f48fcdfa2e84e52a95", 0x0) write(r0, &(0x7f0000000040)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="16f92fd40f0425f7e48ca80419854eb4981e6b1f8cea477ca2260add1d9c937b3946c5234374885bfce6666aeb6f364314e196c0ce528d8124b0816c75132d78745b5d2ea778c30d72461fad1bfa1aaaa811c57b", 0x54}, {&(0x7f0000000280)}], 0x2}, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) munlock(&(0x7f0000315000/0x3000)=nil, 0x3000) 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0x98, 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)=""/11, &(0x7f0000000280)=0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000440)="d8b8650c35a0c744240003010000c744240200000000ff1c2466bad004ec470f22c336450f3066baf80cb89542ac82ef66bafc0cecb8010000000f01c1b9800000c00f3235000400000f3066b882008ed83666430fe730", 0x57}], 0x1, 0x0, &(0x7f0000000500), 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/08 18:54:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1000000002, &(0x7f0000000ffc)=0x4, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/05/08 18:54:46 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:46 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) 2018/05/08 18:54:46 executing program 6: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8}}) 2018/05/08 18:54:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:46 executing program 7: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) 2018/05/08 18:54:47 executing program 1: epoll_create1(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0), 0xfffffeae) close(r0) dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00'}) 2018/05/08 18:54:47 executing program 4: add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="c8", 0x1, 0xfffffffffffffffb) 2018/05/08 18:54:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000002ac0)=@l2, 0x80, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=""/170, 0xaa}}], 0x1, 0x0, &(0x7f0000004000)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x1fd, &(0x7f0000000540)}, 0x0) close(r1) 2018/05/08 18:54:47 executing program 6: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') pread64(r0, &(0x7f0000001280)=""/4096, 0x0, 0x100000) 2018/05/08 18:54:47 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) 2018/05/08 18:54:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:48 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000040)) 2018/05/08 18:54:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/191, 0xbf) 2018/05/08 18:54:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfdfdffff00000000) 2018/05/08 18:54:48 executing program 6: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:48 executing program 2: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb), 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/05/08 18:54:48 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) connect$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000f92000)=""/174) 2018/05/08 18:54:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/05/08 18:54:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:48 executing program 4: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1}, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0009ec03007ffbe5ff8001"], 0x2}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, &(0x7f0000000100)={'bpq0\x00\x00\x00?\x00'}) 2018/05/08 18:54:48 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)) 2018/05/08 18:54:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:49 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0xa, 0x12, r0, 0x0) 2018/05/08 18:54:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f8"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/08 18:54:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x1) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x80000001, 0x2}, {}], 0x30) 2018/05/08 18:54:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00fe8000000000000000000000000000aae000000100000000000000000000000000000004"], 0x38}, 0x1}, 0x0) 2018/05/08 18:54:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000cc0ff5)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/05/08 18:54:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:49 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x32}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa}, 0x1c) 2018/05/08 18:54:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x1000000003) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000003c0)={0x27, 0x0, 0x1, 0x0, 0x0, 0x9, "017d94930c4aa8cd687c18517f5fe0ab6fc7f1ce32d143f98abbd0b18b833f3cffb6c54dd5759a1054b72831838443175e6285fe97061c7fae7a464148044e"}, 0x60, &(0x7f0000000900)=[{&(0x7f0000001300)}], 0x1, &(0x7f0000000980)=ANY=[], 0x0, 0x20000000}], 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x34123610) 2018/05/08 18:54:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:49 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d16ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000017a000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = gettid() sendmmsg(r1, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000640)=@rc={0x1f}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a27ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00008d6000)=r2) readv(r4, &(0x7f0000622fd0)=[{&(0x7f0000b36000)=""/236, 0xec}], 0x1) fcntl$setsig(r3, 0xa, 0x12) dup2(r0, r4) tkill(r2, 0x15) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/08 18:54:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) prctl$setptracer(0x59616d61, 0x0) fchdir(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x30, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d16ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000017a000)=@abs, 0x8) sendmmsg$unix(r4, &(0x7f00000bd000), 0x80, 0x0) r5 = gettid() sendmmsg(r4, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a27ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000008ff8)=0x3f) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00008d6000)=r5) readv(r7, &(0x7f0000622fd0)=[{&(0x7f0000b36000)=""/236, 0xec}], 0x1) fcntl$setsig(r6, 0xa, 0x12) dup2(r3, r7) tkill(r5, 0x15) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/08 18:54:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='D', 0x1, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0)="19", 0x1) 2018/05/08 18:54:51 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) 2018/05/08 18:54:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:51 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2}, 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0), 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/08 18:54:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x6, 0x4, 0x9, 0x62}, 0x13) 2018/05/08 18:54:51 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd(0x0) 2018/05/08 18:54:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000040)={'veth0\x00', @ifru_mtu=0x1}) 2018/05/08 18:54:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:51 executing program 2: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:51 executing program 7: socket(0x8000000000011, 0x4000000000080002, 0x0) 2018/05/08 18:54:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000004000000004) write(r0, &(0x7f0000000000)="290000001400070002ffffffea08e0eb01c86ae2dfa4478b2c370000c53951ce251893a338368f0fc5", 0x29) 2018/05/08 18:54:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffdfd) 2018/05/08 18:54:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f793cdf94dfc2eedfd357e2968058439ed5578e12bb4adee901d2da75af1f029c000000000000000000000000862642e8a959c2b609c251453828230859fce7288ca12be62b49e62a8b38b4d01adeacea77102cf190283fda029ad352fd007946d0dc6c6495") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x5a01, 0x2, 0x0, 0x1, [{}]}) 2018/05/08 18:54:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x30) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x47b) sendto$inet(r0, &(0x7f0000000240)="a9", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10) close(r0) 2018/05/08 18:54:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 2018/05/08 18:54:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:52 executing program 7: r0 = socket$inet(0x2, 0x200000000000003, 0x1) sendto$inet(r0, &(0x7f0000000000)="0b4df0888f4ebbb1", 0x8, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/08 18:54:52 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)) 2018/05/08 18:54:52 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, &(0x7f0000000480)=""/528, 0x210) 2018/05/08 18:54:52 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000200), 0x4) 2018/05/08 18:54:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:52 executing program 7: creat(&(0x7f0000001700)='./file0\x00', 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 2018/05/08 18:54:52 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)) 2018/05/08 18:54:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/05/08 18:54:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:52 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) 2018/05/08 18:54:52 executing program 7: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0xffffffffffffffcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) creat(&(0x7f0000001700)='./file0\x00', 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) 2018/05/08 18:54:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) [ 2447.642191] device bridge0 entered promiscuous mode 2018/05/08 18:54:52 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 2018/05/08 18:54:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:52 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)) 2018/05/08 18:54:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:52 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:54:52 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='..', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/42, 0x2a) 2018/05/08 18:54:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='..', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/42, 0x2a) 2018/05/08 18:54:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) [ 2447.711123] device bridge0 left promiscuous mode 2018/05/08 18:54:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:53 executing program 2: timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) 2018/05/08 18:54:53 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) 2018/05/08 18:54:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:53 executing program 6: socket$inet6(0xa, 0x0, 0x7fffffff) 2018/05/08 18:54:53 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x1) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x63, 0x2}, {}], 0x30) 2018/05/08 18:54:53 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:54:53 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) 2018/05/08 18:54:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) 2018/05/08 18:54:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:53 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x0, [0x4]}, 0x5c) 2018/05/08 18:54:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:53 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000003f00)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 2018/05/08 18:54:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:53 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0) unlink(&(0x7f00000001c0)='./control\x00') close(r1) 2018/05/08 18:54:53 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0) close(r0) 2018/05/08 18:54:53 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:54:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:53 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000140)=0x8) 2018/05/08 18:54:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:53 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x800000000000003) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/05/08 18:54:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:54 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') perf_event_open(&(0x7f000025c000)={0x800000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) 2018/05/08 18:54:54 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:54 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0xaf, @loopback=0x7f000001, 0x4e21, 0x3, 'rr\x00', 0x22}, {@local={0xac, 0x14, 0x14, 0xaa}}}, 0x44) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000800)="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") fgetxattr(r2, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000000), 0x11c) 2018/05/08 18:54:54 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:54:54 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0) unlink(&(0x7f00000001c0)='./control\x00') close(r1) 2018/05/08 18:54:54 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000140)=0x8) 2018/05/08 18:54:54 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0) close(r0) 2018/05/08 18:54:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:54 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:55 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c79000)='stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000ab9000)='gid_map\x00') sendfile(r1, r0, &(0x7f0000317ff8), 0x3) 2018/05/08 18:54:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:55 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:55 executing program 6: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:54:55 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/05/08 18:54:55 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000140)=0x8) 2018/05/08 18:54:55 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000), 0x0) 2018/05/08 18:54:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x30) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x47b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x2d0, 0x4) sendto$inet(r0, &(0x7f0000000240)="a9", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10) close(r0) 2018/05/08 18:54:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca5010000000000000084"}) 2018/05/08 18:54:56 executing program 4: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c1d000)) timerfd_settime(r1, 0x0, &(0x7f0000000fe0)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x9ce, &(0x7f00000000c0), 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000003cff4)={0x7}) 2018/05/08 18:54:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:56 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/2, 0x2}], 0x1) 2018/05/08 18:54:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x4000030]}, 0x1) [ 2451.266490] print_req_error: I/O error, dev loop0, sector 392 [ 2451.273128] buffer_io_error: 120 callbacks suppressed [ 2451.273137] Buffer I/O error on dev loop0, logical block 49, lost async page write 2018/05/08 18:54:57 executing program 4: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000200)={0x18, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/08 18:54:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:57 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f000000effc)=0x90) 2018/05/08 18:54:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:57 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:54:57 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f00000001c0)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0x1000000) mkdir(&(0x7f0000914ff0)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0/control\x00', 0x4000000) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 2018/05/08 18:54:57 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000140)=0x8) 2018/05/08 18:54:57 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x4000038]}, 0x1) 2018/05/08 18:54:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/08 18:54:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:57 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5) 2018/05/08 18:54:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:57 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[0xfc], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x4, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/05/08 18:54:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x8d99) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) 2018/05/08 18:54:57 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect(r0, &(0x7f0000000840)=@in={0x2, 0x4e23}, 0x80) sendmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000700)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000c40)}}], 0x2, 0x0) 2018/05/08 18:54:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001340)={0x303, 0x33}, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='_', 0x1}], 0x1) 2018/05/08 18:54:57 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:54:57 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:54:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 2018/05/08 18:54:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:58 executing program 6: [ 2452.897266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/08 18:54:58 executing program 7: [ 2452.938830] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/08 18:54:58 executing program 5: 2018/05/08 18:54:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:58 executing program 6: 2018/05/08 18:54:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 2018/05/08 18:54:58 executing program 7: 2018/05/08 18:54:58 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:54:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2453.065931] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/08 18:54:59 executing program 7: 2018/05/08 18:54:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 2018/05/08 18:54:59 executing program 6: 2018/05/08 18:54:59 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:54:59 executing program 4: 2018/05/08 18:54:59 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:54:59 executing program 5: 2018/05/08 18:54:59 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}}}, &(0x7f00000004c0)=0x84) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) setfsuid(0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 2453.955395] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/08 18:54:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105511, &(0x7f0000000000)={0x80, 0x259}) 2018/05/08 18:54:59 executing program 7: r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="05c081485b6262b0a39172190396f49a171c390f02253fc32d1ccd36609fb7ffc0c6e1d0f6709dd569da1de794e85280c531866a62592ea796ebfc04ffaf748af1d9d003", 0x44}], 0x1, &(0x7f0000001500)=[@sndrcv={0x2c, 0x84, 0x1, {0x3359, 0x8, 0x2, 0x5, 0x80000000, 0x4, 0x9, 0x4ee6663b}}, @authinfo={0x10, 0x84, 0x6, {0x6}}, @init={0x14, 0x84, 0x0, {0x3, 0x4, 0x400, 0xc000000000000000}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x5}}, @init={0x14, 0x84, 0x0, {0x7f49, 0x0, 0x75dc, 0xfffffffffffffffc}}, @authinfo={0x10, 0x84, 0x6, {0xffffffffffffffc0}}], 0x88, 0x8000}, 0x4000000) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/08 18:54:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:54:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="05c081485b6262b0a39172190396f49a171c390f02253fc32d1ccd36609fb7ffc0c6e1d0f6709dd569da1de794e85280c531866a62592ea796ebfc04ffaf748af1d9d003", 0x44}], 0x1, &(0x7f0000001500)=[@sndrcv={0x2c, 0x84, 0x1, {0x3359, 0x8, 0x2, 0x5, 0x80000000, 0x4, 0x9, 0x4ee6663b}}, @authinfo={0x10, 0x84, 0x6, {0x6}}, @init={0x14, 0x84, 0x0, {0x0, 0x4, 0x400, 0xc000000000000000}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x5}}, @init={0x14, 0x84, 0x0, {0x7f49, 0x9, 0x75dc, 0xfffffffffffffffc}}, @authinfo={0x10, 0x84, 0x6, {0xffffffffffffffc0}}], 0x88, 0x8000}, 0x4000000) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/08 18:54:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 2018/05/08 18:54:59 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:54:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2454.115246] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/08 18:55:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/08 18:55:00 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x101000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20200, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ptrace$peek(0xffffffffffffffff, r0, &(0x7f00000000c0)) openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) setfsuid(0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 2018/05/08 18:55:00 executing program 6: ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000027003103000000000000000010000071577d779349a2307311111850bc9bc4197c7f194a6701c0c062ce06e68954704daaec607ba0d293b3e4fb209056396d6ba7f727a64fda931155084ef6a25870"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2018/05/08 18:55:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:00 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:00 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) 2018/05/08 18:55:00 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) [ 2455.267925] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/08 18:55:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:00 executing program 7: r0 = open(&(0x7f0000000180)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x7fc) 2018/05/08 18:55:00 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/08 18:55:00 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x7, 0x0, "1ba544533fa44e8eab9e583854a35e8f9aa362fafc38b4e91f1cc82ca84115040282dba84f3ab2d11376d4966018d322659feaa4720320a0e67acaffeec3b7b70fc9c9a8d6954af661d78b299d0aa779"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='bridge_slave_1\x00', 0x271) writev(r0, &(0x7f0000002680)=[{&(0x7f0000000600)="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", 0xdb1}], 0x1) sendto$inet(r0, &(0x7f0000000340)="0e", 0x1, 0x0, 0x0, 0x0) 2018/05/08 18:55:00 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000180001001f0000000000000001000000"], 0x1}, 0x1}, 0x0) 2018/05/08 18:55:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:00 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/08 18:55:00 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) read(r0, &(0x7f0000000340)=""/158, 0x9e) 2018/05/08 18:55:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:01 executing program 6: request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='\x00', 0x0) 2018/05/08 18:55:01 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/32) 2018/05/08 18:55:01 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 2018/05/08 18:55:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/08 18:55:01 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) 2018/05/08 18:55:01 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x0, 0x0, "1ba544533fa44e8eab9e583854a35e8f9aa362fafc38b4e91f1cc82ca84115040282dba84f3ab2d11376d4966018d322659feaa4720320a0e67acaffeec3b7b70fc9c9a8d6954af661d78b299d0aa779"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) writev(r0, &(0x7f0000002680)=[{&(0x7f0000000600)="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", 0xe21}], 0x1) 2018/05/08 18:55:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 2018/05/08 18:55:01 executing program 6: 2018/05/08 18:55:01 executing program 7: 2018/05/08 18:55:01 executing program 5: 2018/05/08 18:55:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 2018/05/08 18:55:01 executing program 4: 2018/05/08 18:55:01 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:01 executing program 6: 2018/05/08 18:55:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:02 executing program 7: 2018/05/08 18:55:02 executing program 5: 2018/05/08 18:55:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 2018/05/08 18:55:02 executing program 4: 2018/05/08 18:55:02 executing program 6: 2018/05/08 18:55:02 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) 2018/05/08 18:55:02 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:02 executing program 4: 2018/05/08 18:55:02 executing program 7: 2018/05/08 18:55:02 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x0) 2018/05/08 18:55:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:02 executing program 6: 2018/05/08 18:55:02 executing program 5: 2018/05/08 18:55:02 executing program 7: 2018/05/08 18:55:02 executing program 4: 2018/05/08 18:55:02 executing program 6: 2018/05/08 18:55:02 executing program 5: 2018/05/08 18:55:03 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x0) 2018/05/08 18:55:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:03 executing program 7: 2018/05/08 18:55:03 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:03 executing program 6: 2018/05/08 18:55:03 executing program 5: 2018/05/08 18:55:03 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) 2018/05/08 18:55:03 executing program 4: 2018/05/08 18:55:03 executing program 6: 2018/05/08 18:55:03 executing program 4: 2018/05/08 18:55:03 executing program 5: 2018/05/08 18:55:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:03 executing program 7: 2018/05/08 18:55:03 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x0) 2018/05/08 18:55:04 executing program 6: 2018/05/08 18:55:04 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:04 executing program 4: 2018/05/08 18:55:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:04 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c4", 0x26}], 0x1}, 0x0) 2018/05/08 18:55:04 executing program 7: 2018/05/08 18:55:04 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:04 executing program 5: 2018/05/08 18:55:04 executing program 4: 2018/05/08 18:55:04 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c4", 0x26}], 0x1}, 0x0) 2018/05/08 18:55:04 executing program 7: 2018/05/08 18:55:04 executing program 5: 2018/05/08 18:55:04 executing program 6: 2018/05/08 18:55:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:04 executing program 4: 2018/05/08 18:55:04 executing program 5: 2018/05/08 18:55:05 executing program 7: 2018/05/08 18:55:05 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:05 executing program 6: 2018/05/08 18:55:05 executing program 4: 2018/05/08 18:55:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:05 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c4", 0x26}], 0x1}, 0x0) 2018/05/08 18:55:05 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:05 executing program 5: 2018/05/08 18:55:05 executing program 4: 2018/05/08 18:55:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:05 executing program 6: 2018/05/08 18:55:05 executing program 5: 2018/05/08 18:55:05 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c6", 0x39}], 0x1}, 0x0) 2018/05/08 18:55:05 executing program 4: 2018/05/08 18:55:05 executing program 7: 2018/05/08 18:55:05 executing program 5: 2018/05/08 18:55:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:06 executing program 6: 2018/05/08 18:55:06 executing program 7: 2018/05/08 18:55:06 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c6", 0x39}], 0x1}, 0x0) 2018/05/08 18:55:06 executing program 5: 2018/05/08 18:55:06 executing program 4: 2018/05/08 18:55:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:06 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:06 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:06 executing program 6: 2018/05/08 18:55:06 executing program 7: 2018/05/08 18:55:06 executing program 5: 2018/05/08 18:55:06 executing program 4: 2018/05/08 18:55:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:06 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c6", 0x39}], 0x1}, 0x0) 2018/05/08 18:55:06 executing program 6: 2018/05/08 18:55:07 executing program 7: 2018/05/08 18:55:07 executing program 6: 2018/05/08 18:55:07 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:07 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02", 0x43}], 0x1}, 0x0) 2018/05/08 18:55:07 executing program 5: 2018/05/08 18:55:07 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:07 executing program 4: 2018/05/08 18:55:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:07 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02", 0x43}], 0x1}, 0x0) 2018/05/08 18:55:07 executing program 5: 2018/05/08 18:55:07 executing program 7: 2018/05/08 18:55:07 executing program 4: 2018/05/08 18:55:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:07 executing program 6: 2018/05/08 18:55:08 executing program 5: 2018/05/08 18:55:08 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02", 0x43}], 0x1}, 0x0) 2018/05/08 18:55:08 executing program 7: 2018/05/08 18:55:08 executing program 4: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:08 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:08 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:08 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:08 executing program 5: 2018/05/08 18:55:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:08 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc83", 0x48}], 0x1}, 0x0) 2018/05/08 18:55:08 executing program 7: 2018/05/08 18:55:08 executing program 5: 2018/05/08 18:55:08 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:08 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc83", 0x48}], 0x1}, 0x0) 2018/05/08 18:55:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:09 executing program 7: 2018/05/08 18:55:09 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:09 executing program 5: 2018/05/08 18:55:09 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc83", 0x48}], 0x1}, 0x0) 2018/05/08 18:55:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:09 executing program 4: 2018/05/08 18:55:09 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:09 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:09 executing program 4: 2018/05/08 18:55:09 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b07", 0x4a}], 0x1}, 0x0) 2018/05/08 18:55:09 executing program 7: 2018/05/08 18:55:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:09 executing program 5: 2018/05/08 18:55:09 executing program 4: 2018/05/08 18:55:09 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b07", 0x4a}], 0x1}, 0x0) 2018/05/08 18:55:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:10 executing program 7: 2018/05/08 18:55:10 executing program 5: 2018/05/08 18:55:10 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:10 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b07", 0x4a}], 0x1}, 0x0) 2018/05/08 18:55:10 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:10 executing program 4: 2018/05/08 18:55:10 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:10 executing program 4: 2018/05/08 18:55:10 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790", 0x4b}], 0x1}, 0x0) 2018/05/08 18:55:10 executing program 5: 2018/05/08 18:55:10 executing program 7: 2018/05/08 18:55:10 executing program 4: 2018/05/08 18:55:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:10 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790", 0x4b}], 0x1}, 0x0) 2018/05/08 18:55:10 executing program 4: 2018/05/08 18:55:10 executing program 5: 2018/05/08 18:55:11 executing program 7: 2018/05/08 18:55:11 executing program 5: 2018/05/08 18:55:11 executing program 4: 2018/05/08 18:55:11 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790", 0x4b}], 0x1}, 0x0) 2018/05/08 18:55:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:11 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:11 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) 2018/05/08 18:55:11 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:11 executing program 7: 2018/05/08 18:55:11 executing program 5: 2018/05/08 18:55:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:11 executing program 4: 2018/05/08 18:55:11 executing program 1: 2018/05/08 18:55:11 executing program 7: 2018/05/08 18:55:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:12 executing program 5: 2018/05/08 18:55:12 executing program 4: 2018/05/08 18:55:12 executing program 1: 2018/05/08 18:55:12 executing program 7: 2018/05/08 18:55:12 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:12 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:12 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) 2018/05/08 18:55:12 executing program 7: 2018/05/08 18:55:12 executing program 1: 2018/05/08 18:55:12 executing program 5: 2018/05/08 18:55:12 executing program 4: 2018/05/08 18:55:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:12 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:12 executing program 1: 2018/05/08 18:55:12 executing program 5: 2018/05/08 18:55:12 executing program 4: 2018/05/08 18:55:12 executing program 1: 2018/05/08 18:55:12 executing program 7: 2018/05/08 18:55:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:13 executing program 5: 2018/05/08 18:55:13 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:13 executing program 4: 2018/05/08 18:55:13 executing program 7: 2018/05/08 18:55:13 executing program 1: 2018/05/08 18:55:13 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) 2018/05/08 18:55:13 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:13 executing program 1: 2018/05/08 18:55:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:13 executing program 7: 2018/05/08 18:55:13 executing program 4: 2018/05/08 18:55:13 executing program 5: 2018/05/08 18:55:13 executing program 4: 2018/05/08 18:55:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x270, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:14 executing program 5: 2018/05/08 18:55:14 executing program 1: 2018/05/08 18:55:14 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:14 executing program 7: 2018/05/08 18:55:14 executing program 4: 2018/05/08 18:55:14 executing program 2: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') readv(0xffffffffffffffff, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:14 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:14 executing program 5: 2018/05/08 18:55:14 executing program 4: 2018/05/08 18:55:14 executing program 1: 2018/05/08 18:55:14 executing program 7: 2018/05/08 18:55:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:14 executing program 1: 2018/05/08 18:55:15 executing program 7: 2018/05/08 18:55:15 executing program 4: 2018/05/08 18:55:15 executing program 1: 2018/05/08 18:55:15 executing program 5: 2018/05/08 18:55:15 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:15 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:15 executing program 7: 2018/05/08 18:55:15 executing program 1: 2018/05/08 18:55:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:15 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:15 executing program 4: 2018/05/08 18:55:15 executing program 5: 2018/05/08 18:55:15 executing program 1: 2018/05/08 18:55:15 executing program 7: 2018/05/08 18:55:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:15 executing program 5: 2018/05/08 18:55:16 executing program 4: 2018/05/08 18:55:16 executing program 1: 2018/05/08 18:55:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:16 executing program 7: 2018/05/08 18:55:16 executing program 5: 2018/05/08 18:55:16 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:16 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:16 executing program 7: 2018/05/08 18:55:16 executing program 5: 2018/05/08 18:55:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:16 executing program 1: 2018/05/08 18:55:16 executing program 4: 2018/05/08 18:55:16 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:16 executing program 1: 2018/05/08 18:55:16 executing program 5: 2018/05/08 18:55:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:16 executing program 7: 2018/05/08 18:55:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:16 executing program 1: 2018/05/08 18:55:16 executing program 4: 2018/05/08 18:55:16 executing program 7: 2018/05/08 18:55:16 executing program 5: 2018/05/08 18:55:16 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:16 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:17 executing program 1: 2018/05/08 18:55:17 executing program 7: 2018/05/08 18:55:17 executing program 5: 2018/05/08 18:55:17 executing program 4: 2018/05/08 18:55:17 executing program 1: 2018/05/08 18:55:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:17 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:17 executing program 5: 2018/05/08 18:55:17 executing program 4: 2018/05/08 18:55:17 executing program 7: 2018/05/08 18:55:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:17 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:17 executing program 1: 2018/05/08 18:55:18 executing program 1: 2018/05/08 18:55:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:18 executing program 4: 2018/05/08 18:55:18 executing program 7: 2018/05/08 18:55:18 executing program 5: 2018/05/08 18:55:18 executing program 1: 2018/05/08 18:55:18 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:18 executing program 4: 2018/05/08 18:55:18 executing program 7: 2018/05/08 18:55:18 executing program 5: 2018/05/08 18:55:18 executing program 1: 2018/05/08 18:55:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:18 executing program 1: 2018/05/08 18:55:18 executing program 5: 2018/05/08 18:55:18 executing program 4: 2018/05/08 18:55:18 executing program 7: 2018/05/08 18:55:18 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:18 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:18 executing program 1: 2018/05/08 18:55:18 executing program 5: 2018/05/08 18:55:18 executing program 7: 2018/05/08 18:55:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:19 executing program 1: 2018/05/08 18:55:19 executing program 4: 2018/05/08 18:55:19 executing program 5: 2018/05/08 18:55:19 executing program 7: 2018/05/08 18:55:19 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:19 executing program 4: 2018/05/08 18:55:19 executing program 5: 2018/05/08 18:55:19 executing program 1: 2018/05/08 18:55:19 executing program 7: 2018/05/08 18:55:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:19 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:19 executing program 5: 2018/05/08 18:55:19 executing program 1: 2018/05/08 18:55:19 executing program 4: 2018/05/08 18:55:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:19 executing program 7: 2018/05/08 18:55:19 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:19 executing program 4: 2018/05/08 18:55:19 executing program 1: 2018/05/08 18:55:19 executing program 7: 2018/05/08 18:55:19 executing program 5: 2018/05/08 18:55:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:19 executing program 1: 2018/05/08 18:55:20 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:20 executing program 4: 2018/05/08 18:55:20 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:20 executing program 7: 2018/05/08 18:55:20 executing program 5: 2018/05/08 18:55:20 executing program 1: 2018/05/08 18:55:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:20 executing program 4: 2018/05/08 18:55:20 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:20 executing program 7: 2018/05/08 18:55:20 executing program 4: 2018/05/08 18:55:20 executing program 1: 2018/05/08 18:55:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:20 executing program 5: 2018/05/08 18:55:20 executing program 1: 2018/05/08 18:55:20 executing program 4: 2018/05/08 18:55:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:21 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:21 executing program 1: 2018/05/08 18:55:21 executing program 7: 2018/05/08 18:55:21 executing program 5: 2018/05/08 18:55:21 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:21 executing program 4: 2018/05/08 18:55:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:21 executing program 1: 2018/05/08 18:55:21 executing program 4: 2018/05/08 18:55:21 executing program 5: 2018/05/08 18:55:21 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:21 executing program 7: 2018/05/08 18:55:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:21 executing program 1: 2018/05/08 18:55:22 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:22 executing program 4: 2018/05/08 18:55:22 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:22 executing program 5: 2018/05/08 18:55:22 executing program 7: 2018/05/08 18:55:22 executing program 1: 2018/05/08 18:55:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:22 executing program 1: 2018/05/08 18:55:22 executing program 4: 2018/05/08 18:55:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:22 executing program 5: 2018/05/08 18:55:22 executing program 7: 2018/05/08 18:55:22 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:22 executing program 1: 2018/05/08 18:55:22 executing program 4: 2018/05/08 18:55:23 executing program 6: prctl$setname(0xf, &(0x7f0000000280)=':wlan1[mime_type)ppp0eth0em1$\x00') readv(0xffffffffffffffff, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:23 executing program 5: 2018/05/08 18:55:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:23 executing program 1: 2018/05/08 18:55:23 executing program 7: 2018/05/08 18:55:23 executing program 4: 2018/05/08 18:55:23 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) 2018/05/08 18:55:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:23 executing program 1: 2018/05/08 18:55:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:23 executing program 4: 2018/05/08 18:55:23 executing program 5: 2018/05/08 18:55:23 executing program 7: 2018/05/08 18:55:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:24 executing program 1: 2018/05/08 18:55:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:24 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x0) 2018/05/08 18:55:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:24 executing program 4: 2018/05/08 18:55:24 executing program 5: 2018/05/08 18:55:24 executing program 7: 2018/05/08 18:55:24 executing program 1: 2018/05/08 18:55:24 executing program 7: 2018/05/08 18:55:24 executing program 4: 2018/05/08 18:55:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:24 executing program 5: 2018/05/08 18:55:24 executing program 1: 2018/05/08 18:55:24 executing program 4: 2018/05/08 18:55:24 executing program 7: 2018/05/08 18:55:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:25 executing program 4: 2018/05/08 18:55:25 executing program 1: 2018/05/08 18:55:25 executing program 7: 2018/05/08 18:55:25 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x0) 2018/05/08 18:55:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:25 executing program 5: 2018/05/08 18:55:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:25 executing program 1: 2018/05/08 18:55:26 executing program 7: 2018/05/08 18:55:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:26 executing program 1: 2018/05/08 18:55:26 executing program 5: 2018/05/08 18:55:26 executing program 4: 2018/05/08 18:55:26 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000076eff4)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x0) 2018/05/08 18:55:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:26 executing program 7: 2018/05/08 18:55:26 executing program 1: 2018/05/08 18:55:26 executing program 4: 2018/05/08 18:55:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:26 executing program 5: 2018/05/08 18:55:26 executing program 1: 2018/05/08 18:55:27 executing program 4: 2018/05/08 18:55:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:27 executing program 7: 2018/05/08 18:55:27 executing program 1: 2018/05/08 18:55:27 executing program 5: 2018/05/08 18:55:27 executing program 0: 2018/05/08 18:55:27 executing program 5: 2018/05/08 18:55:27 executing program 1: 2018/05/08 18:55:27 executing program 4: 2018/05/08 18:55:27 executing program 0: 2018/05/08 18:55:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:27 executing program 7: 2018/05/08 18:55:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:27 executing program 1: 2018/05/08 18:55:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:28 executing program 5: 2018/05/08 18:55:28 executing program 0: 2018/05/08 18:55:28 executing program 1: 2018/05/08 18:55:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:28 executing program 4: 2018/05/08 18:55:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:28 executing program 7: 2018/05/08 18:55:28 executing program 1: 2018/05/08 18:55:28 executing program 5: 2018/05/08 18:55:28 executing program 7: 2018/05/08 18:55:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:28 executing program 0: r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/89, 0x59}, {&(0x7f0000001240)=""/20, 0x5}, {&(0x7f0000000040)=""/154, 0x9a}, {&(0x7f0000001340)=""/46, 0x2e}, {&(0x7f0000001380)=""/241, 0xf1}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/39, 0x9}, {&(0x7f0000000000)=""/33, 0x21}], 0x9, 0x0) 2018/05/08 18:55:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/149, 0x854641f330458cad, 0x0, 0x0, 0xfd69) 2018/05/08 18:55:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000160023021ba9a55ce8452a8aa2824600b7632c8f65ea980f9129a9170a4e7d1644c887d256405415b326111cff30be41cca60d76bd610109b72728cc588f1d79e16fb0c2277a3591c79fcb5d257c10a79079498fce12a88bc025bd551c11c9b662fa7fd2cb25d911a14de1e21eb542d7a9839ca9a191fcc6c28c451b707f7e42e6d57e8354f9894845bd2b5500efac"], 0x1}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f00000015c0)=""/152, 0x98}, 0x0) 2018/05/08 18:55:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1c2, &(0x7f0000000380)) sendfile(r1, r1, &(0x7f0000000040), 0x4) 2018/05/08 18:55:28 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000001600000000000000030006000f2000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001030000000000000000100000000303000000000000000000001d0000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/05/08 18:55:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x0, 0x80000000001}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x10001}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/08 18:55:29 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 2018/05/08 18:55:29 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001a80)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001580)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000011c0)=@resolve_ip={0x3, 0x40, 0xfa09, {{0xa}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 2018/05/08 18:55:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1c2, &(0x7f0000000380)) sendfile(r1, r1, &(0x7f0000000040), 0x4) 2018/05/08 18:55:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @rand_addr=0xffffffffffff9f53}, {0x2, 0x0, @broadcast=0xffffffff}, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) 2018/05/08 18:55:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20020003, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:55:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:29 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x140, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 2018/05/08 18:55:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) 2018/05/08 18:55:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/248, 0x3}) 2018/05/08 18:55:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000080)=0x3e6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x1000, 0xd000, 0x0, 0x8000, 0x80, 0x1000, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x200000, 0x1ff, 0xfff}, {0x4000, 0x1, 0x0, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x3, 0x6, 0x4, 0x800}, {0xf000, 0x5000, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x8, 0x7, 0x0, 0x6, 0x9e1}, {0x6000, 0x2001, 0xd, 0x3ff, 0x7fff, 0x3, 0x7, 0x571, 0x240, 0x2, 0x7, 0x9}, {0x4, 0x1, 0xf, 0x33, 0x3, 0x9, 0x4a9, 0x5, 0x2, 0x0, 0x1, 0x4}, {0x100000, 0x16000, 0x4, 0x7fffffff, 0x800000000000000, 0x6, 0x2, 0x3ff, 0x8, 0x5, 0xaaaf, 0x3}, {0x100000, 0x7000, 0x10, 0x2, 0x9, 0x4, 0xce, 0x5, 0xff, 0x7f, 0x4f0, 0x100}, {0x4, 0xf000, 0xf, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x100, 0x9, 0x9}, {0x7000, 0x1}, {0x4002, 0x6000}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x1, 0x2000, [0x1, 0x1, 0xc9ea, 0xffffffffffffffff]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2400) dup3(r0, r1, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x89c2, 0x4, 0x1, 0x83, 0xfffffffffffffffa, 0x8}, 0x100000001}, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 2018/05/08 18:55:30 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x40046104, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) 2018/05/08 18:55:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:30 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x443}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:30 executing program 7: bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000002b80), 0x7fffffff) lseek(r2, 0x0, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/08 18:55:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:30 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2485.688393] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.694958] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/08 18:55:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c0ff0300000000000008000100030442fdffdf00", 0x1f) 2018/05/08 18:55:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2485.743208] device bridge_slave_1 left promiscuous mode [ 2485.749538] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/08 18:55:30 executing program 4: perf_event_open(&(0x7f00002b5f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000180)=""/48, &(0x7f00000001c0)=0x30) 2018/05/08 18:55:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:30 executing program 7: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TTUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/182) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/netlink\x00') ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/05/08 18:55:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2485.784452] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 2485.798648] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 2485.813175] device bridge_slave_0 left promiscuous mode [ 2485.818749] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/08 18:55:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000080)=0x3e6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x1000, 0xd000, 0x0, 0x8000, 0x80, 0x1000, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x200000, 0x1ff, 0xfff}, {0x4000, 0x1, 0x0, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x3, 0x6, 0x4, 0x800}, {0xf000, 0x5000, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x8, 0x7, 0x0, 0x6, 0x9e1}, {0x6000, 0x2001, 0xd, 0x3ff, 0x7fff, 0x3, 0x7, 0x571, 0x240, 0x2, 0x7, 0x9}, {0x4, 0x1, 0xf, 0x33, 0x3, 0x9, 0x4a9, 0x5, 0x2, 0x0, 0x1, 0x4}, {0x100000, 0x16000, 0x4, 0x7fffffff, 0x800000000000000, 0x6, 0x2, 0x3ff, 0x8, 0x5, 0xaaaf, 0x3}, {0x100000, 0x7000, 0x10, 0x2, 0x9, 0x4, 0xce, 0x5, 0xff, 0x7f, 0x4f0, 0x100}, {0x4, 0xf000, 0xf, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x100, 0x9, 0x9}, {0x7000, 0x1}, {0x4002, 0x6000}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x1, 0x2000, [0x1, 0x1, 0xc9ea, 0xffffffffffffffff]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2400) dup3(r0, r1, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x89c2, 0x4, 0x1, 0x83, 0xfffffffffffffffa, 0x8}, 0x100000001}, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 2018/05/08 18:55:31 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="87", 0x1, 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000100)=""/247, 0xf7) 2018/05/08 18:55:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000080)=0x3e6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x1000, 0xd000, 0x0, 0x8000, 0x80, 0x1000, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x200000, 0x1ff, 0xfff}, {0x4000, 0x1, 0x0, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x3, 0x6, 0x4, 0x800}, {0xf000, 0x5000, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x8, 0x7, 0x0, 0x6, 0x9e1}, {0x6000, 0x2001, 0xd, 0x3ff, 0x7fff, 0x3, 0x7, 0x571, 0x240, 0x2, 0x7, 0x9}, {0x4, 0x1, 0xf, 0x33, 0x3, 0x9, 0x4a9, 0x5, 0x2, 0x0, 0x1, 0x4}, {0x100000, 0x16000, 0x4, 0x7fffffff, 0x800000000000000, 0x6, 0x2, 0x3ff, 0x8, 0x5, 0xaaaf, 0x3}, {0x100000, 0x7000, 0x10, 0x2, 0x9, 0x4, 0xce, 0x5, 0xff, 0x7f, 0x4f0, 0x100}, {0x4, 0xf000, 0xf, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x100, 0x9, 0x9}, {0x7000, 0x1}, {0x4002, 0x6000}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x1, 0x2000, [0x1, 0x1, 0xc9ea, 0xffffffffffffffff]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2400) dup3(r0, r1, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x89c2, 0x4, 0x1, 0x83, 0xfffffffffffffffa, 0x8}, 0x100000001}, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 2018/05/08 18:55:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000080)=0x3e6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x1000, 0xd000, 0x0, 0x8000, 0x80, 0x1000, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x200000, 0x1ff, 0xfff}, {0x4000, 0x1, 0x0, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x3, 0x6, 0x4, 0x800}, {0xf000, 0x5000, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x8, 0x7, 0x0, 0x6, 0x9e1}, {0x6000, 0x2001, 0xd, 0x3ff, 0x7fff, 0x3, 0x7, 0x571, 0x240, 0x2, 0x7, 0x9}, {0x4, 0x1, 0xf, 0x33, 0x3, 0x9, 0x4a9, 0x5, 0x2, 0x0, 0x1, 0x4}, {0x100000, 0x16000, 0x4, 0x7fffffff, 0x800000000000000, 0x6, 0x2, 0x3ff, 0x8, 0x5, 0xaaaf, 0x3}, {0x100000, 0x7000, 0x10, 0x2, 0x9, 0x4, 0xce, 0x5, 0xff, 0x7f, 0x4f0, 0x100}, {0x4, 0xf000, 0xf, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x100, 0x9, 0x9}, {0x7000, 0x1}, {0x4002, 0x6000}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x1, 0x2000, [0x1, 0x1, 0xc9ea, 0xffffffffffffffff]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2400) dup3(r0, r1, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x89c2, 0x4, 0x1, 0x83, 0xfffffffffffffffa, 0x8}, 0x100000001}, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 2018/05/08 18:55:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000080)=0x3e6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x1000, 0xd000, 0x0, 0x8000, 0x80, 0x1000, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x200000, 0x1ff, 0xfff}, {0x4000, 0x1, 0x0, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x3, 0x6, 0x4, 0x800}, {0xf000, 0x5000, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x8, 0x7, 0x0, 0x6, 0x9e1}, {0x6000, 0x2001, 0xd, 0x3ff, 0x7fff, 0x3, 0x7, 0x571, 0x240, 0x2, 0x7, 0x9}, {0x4, 0x1, 0xf, 0x33, 0x3, 0x9, 0x4a9, 0x5, 0x2, 0x0, 0x1, 0x4}, {0x100000, 0x16000, 0x4, 0x7fffffff, 0x800000000000000, 0x6, 0x2, 0x3ff, 0x8, 0x5, 0xaaaf, 0x3}, {0x100000, 0x7000, 0x10, 0x2, 0x9, 0x4, 0xce, 0x5, 0xff, 0x7f, 0x4f0, 0x100}, {0x4, 0xf000, 0xf, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x100, 0x9, 0x9}, {0x7000, 0x1}, {0x4002, 0x6000}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x1, 0x2000, [0x1, 0x1, 0xc9ea, 0xffffffffffffffff]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2400) dup3(r0, r1, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x89c2, 0x4, 0x1, 0x83, 0xfffffffffffffffa, 0x8}, 0x100000001}, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 2018/05/08 18:55:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0xfff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x401}) 2018/05/08 18:55:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2486.680637] device bridge_slave_1 left promiscuous mode [ 2486.686228] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/08 18:55:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:31 executing program 4: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) [ 2486.744884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2487.649299] ptrace attach of "/root/syz-executor4"[4539] was attempted by "/root/syz-executor4"[7442] [ 2487.676850] ptrace attach of "/root/syz-executor4"[4539] was attempted by "/root/syz-executor4"[7441] 2018/05/08 18:55:32 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000080)=0x3e6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x1000, 0xd000, 0x0, 0x8000, 0x80, 0x1000, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x200000, 0x1ff, 0xfff}, {0x4000, 0x1, 0x0, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x3, 0x6, 0x4, 0x800}, {0xf000, 0x5000, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x8, 0x7, 0x0, 0x6, 0x9e1}, {0x6000, 0x2001, 0xd, 0x3ff, 0x7fff, 0x3, 0x7, 0x571, 0x240, 0x2, 0x7, 0x9}, {0x4, 0x1, 0xf, 0x33, 0x3, 0x9, 0x4a9, 0x5, 0x2, 0x0, 0x1, 0x4}, {0x100000, 0x16000, 0x4, 0x7fffffff, 0x800000000000000, 0x6, 0x2, 0x3ff, 0x8, 0x5, 0xaaaf, 0x3}, {0x100000, 0x7000, 0x10, 0x2, 0x9, 0x4, 0xce, 0x5, 0xff, 0x7f, 0x4f0, 0x100}, {0x4, 0xf000, 0xf, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x100, 0x9, 0x9}, {0x7000, 0x1}, {0x4002, 0x6000}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x1, 0x2000, [0x1, 0x1, 0xc9ea, 0xffffffffffffffff]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2400) dup3(r0, r1, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x89c2, 0x4, 0x1, 0x83, 0xfffffffffffffffa, 0x8}, 0x100000001}, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 2018/05/08 18:55:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:32 executing program 7: io_setup(0x7ff, &(0x7f0000000040)) 2018/05/08 18:55:32 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:33 executing program 4: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:55:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:33 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:33 executing program 0: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:55:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340)=0x8, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x242, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) recvfrom$inet6(r2, &(0x7f00000002c0)=""/170, 0xfffffecc, 0x0, 0x0, 0xffffffffffffff5f) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xffffff31, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r0, 0x1) 2018/05/08 18:55:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:34 executing program 4: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:55:34 executing program 0: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:55:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:34 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000400)}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)}]) 2018/05/08 18:55:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/05/08 18:55:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000301ff8), 0xffffffff) 2018/05/08 18:55:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000), 0x10001) 2018/05/08 18:55:34 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/05/08 18:55:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x0) 2018/05/08 18:55:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x0) 2018/05/08 18:55:35 executing program 7: ioprio_get$pid(0x3, 0x0) 2018/05/08 18:55:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x0) 2018/05/08 18:55:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:35 executing program 0: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:55:35 executing program 4: clone(0x200, &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000180), &(0x7f0000000500)) mknod(&(0x7f0000000080)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) add_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000640), 0x0, 0xfffffffffffffff9) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2018/05/08 18:55:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:35 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x0) 2018/05/08 18:55:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/arp\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x0) 2018/05/08 18:55:35 executing program 7: r0 = memfd_create(&(0x7f0000000000)='dev ', 0x4) fallocate(r0, 0x3, 0x0, 0x3847ffffffffe) 2018/05/08 18:55:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x0) 2018/05/08 18:55:35 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x400000102}) 2018/05/08 18:55:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:36 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) 2018/05/08 18:55:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:36 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x3f) dup3(r1, r0, 0x0) 2018/05/08 18:55:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:55:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84008) fallocate(r1, 0x3, 0x0, 0xffffffff) fallocate(r1, 0x3, 0x0, 0xffff) 2018/05/08 18:55:36 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:36 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)="6e1009005558bf1a98f667797fca17a549e4f4f8650136c9bc9d42debf4840b97a8819cd46c867fd1add856270fb0f203fe49ba58af13cd0847a5dcb4247f639ccadcedad0939ff38b3ebf7c13e16d66ac6865da41c80ded9fe100fae3504e7834d99aa5a04ea6fa73a653398f0547b0dcf0760e8b4afe4067c65fafc18100b4f676d8629d35d2fc59") 2018/05/08 18:55:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:36 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000580)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00006dfff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/08 18:55:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc5fca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") flistxattr(r0, &(0x7f0000000000)=""/197, 0x87) 2018/05/08 18:55:36 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7003) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) 2018/05/08 18:55:36 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) 2018/05/08 18:55:36 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x10, r0, 0x0) 2018/05/08 18:55:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:37 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:37 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/08 18:55:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ddff8), 0x0) 2018/05/08 18:55:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:37 executing program 7: rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x8) 2018/05/08 18:55:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) 2018/05/08 18:55:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) 2018/05/08 18:55:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:37 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) io_getevents(r0, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={r1}) r2 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100), 0x2c2}]) io_destroy(r0) 2018/05/08 18:55:37 executing program 7: socket(0x0, 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7003) close(r0) 2018/05/08 18:55:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ddff8), 0x0) 2018/05/08 18:55:37 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x2b, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:37 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x2b, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:37 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ac14ffbb00000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/05/08 18:55:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000accffb)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) 2018/05/08 18:55:37 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) io_getevents(r0, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={r1}) r2 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100), 0x2c2}]) io_destroy(r0) 2018/05/08 18:55:37 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) 2018/05/08 18:55:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:38 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) io_getevents(r0, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={r1}) r2 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100), 0x2c2}]) io_destroy(r0) 2018/05/08 18:55:38 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001e00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001600)={0xd0, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1}, {0xb4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}]}}]}, 0xd0}, 0x1}, 0x0) shutdown(r0, 0x1) 2018/05/08 18:55:38 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x2b, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:38 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:38 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x2b, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) 2018/05/08 18:55:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x3, 0x5, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) 2018/05/08 18:55:38 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000184000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/05/08 18:55:38 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:38 executing program 7: migrate_pages(0x0, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x9) 2018/05/08 18:55:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:39 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:39 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x0, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mount(&(0x7f0000001180)='./file0\x00', &(0x7f000020fff2)='./file0\x00', &(0x7f00000d1000)='Ouns\x00', 0x2000, &(0x7f0000a50f14)) 2018/05/08 18:55:39 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b5ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x8000004001, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000e65000)='V', 0x1, 0x0, 0x0, 0x0) 2018/05/08 18:55:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000003000)=""/16, &(0x7f0000006ffc)=0x2) 2018/05/08 18:55:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x10000, 0x40a}) 2018/05/08 18:55:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:39 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x0, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:39 executing program 2: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f000021bff8)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x224b, &(0x7f0000000000)=[{}, {}]}, 0x10) 2018/05/08 18:55:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000400), &(0x7f0000000180)=0x3b7) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000380)={0x0, 0xf3b1, 0x10}, &(0x7f00000003c0)=0xc) poll(&(0x7f0000000000)=[{r0, 0x8080}], 0x1, 0x80004001) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x2000008) 2018/05/08 18:55:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 2018/05/08 18:55:40 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "51021d", 0x14, 0x0, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) 2018/05/08 18:55:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xc000000020011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=ANY=[@ANYBLOB="4001000010001307000000000000c400000000000000000000000000000000000000000000000000000000000000000000000001000000000046000000000000", @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008000c0000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/05/08 18:55:40 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 2018/05/08 18:55:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:40 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x439, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x190) 2018/05/08 18:55:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:40 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) read(r0, &(0x7f0000000440)=""/4096, 0x1000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) 2018/05/08 18:55:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x190) 2018/05/08 18:55:40 executing program 5: mkdir(&(0x7f000047eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000373ff5)="6d6f756e74696e666f00a4") preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x2000) 2018/05/08 18:55:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763892c38ac6568b3e891941f02f1265047502f6c2dd9f65572005da7147991090bef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c379723f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a4503c1c147cc5172df09c10eea22b1fcfb05ab850fb1fa7d86e5d217d4a59a70ba6ccaa8343014d5cbdf9cec8b13073ffe66b7490e5dc8a2ff8d0bc42cf8a84fdee6") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)="2750e35d428fe823843c88fa1acabc33c8776e7874d1d05b9fbffd9139b44834f8e643f1890f424489f44291bf41e562") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000040)='ubifs\x00', 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, &(0x7f0000d1cfff)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/08 18:55:40 executing program 0: ustat(0x0, &(0x7f0000000040)) 2018/05/08 18:55:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000140), 0x0) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000040)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) 2018/05/08 18:55:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="747468302c7ad9cb741f00", 0x0) getpgrp(0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') sendfile(r0, r1, &(0x7f00000015c0), 0x7ffb) 2018/05/08 18:55:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:40 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x1c}, 0x1}, 0x0) r0 = syz_open_dev$random(&(0x7f0000000240)='/dev/random\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2018/05/08 18:55:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:41 executing program 0: open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) getsockname$ipx(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00003f5000)='./file0\x00', 0x0, 0x0) fcntl$getflags(r1, 0x401) 2018/05/08 18:55:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20000080904900, &(0x7f0000623000), &(0x7f0000000000), &(0x7f0000907000), &(0x7f0000553000)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)) 2018/05/08 18:55:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x1, 0xa50, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'gretap0\x00', 'gre0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x948, 0x990, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xa74) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200018c0], 0x0, &(0x7f0000000100), &(0x7f00000018c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syz_tun\x00', 'syzkaller1\x00', 'bond_slave_0\x00', 'sit0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x70, 0xa8, 0xf0}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffd}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x0, 0x0, 'veth0_to_bond\x00', 'eql\x00', 'bond_slave_1\x00', 'syzkaller1\x00', @random="867c8aa5cf0b", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x274) 2018/05/08 18:55:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x6612, &(0x7f0000000100)={0x388, &(0x7f0000000140)}) 2018/05/08 18:55:41 executing program 2: pipe2(&(0x7f0000f14000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$evdev(r0, &(0x7f0000b45fd0)=[{{0x77359400}}], 0x18) io_setup(0x7, &(0x7f0000a8aff8)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="06000000000000009d", 0x9}]) 2018/05/08 18:55:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000004c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1}]}, 0x30}, 0x1}, 0x0) 2018/05/08 18:55:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2496.339482] kernel msg: ebtables bug: please report to author: Wrong len argument [ 2496.377866] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/08 18:55:41 executing program 4: getgroups(0x1, &(0x7f0000000000)=[0x0]) 2018/05/08 18:55:41 executing program 5: r0 = socket(0x10, 0x400000000003, 0x0) clock_gettime(0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000f7bfc0), 0xd948aa, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x309}, 0x24}, 0x1}, 0x0) 2018/05/08 18:55:41 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) 2018/05/08 18:55:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x242, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f00000002c0)=""/170, 0xfffffecc, 0x0, 0x0, 0xffffffffffffff5f) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xffffff31, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r0, 0x1) [ 2496.419594] kernel msg: ebtables bug: please report to author: Wrong len argument [ 2496.434843] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/08 18:55:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x400000000005, 0x4) fcntl$setstatus(r0, 0x4, 0x44000) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000840)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) r2 = dup2(r1, r0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000008c0)=""/207, &(0x7f0000000740)=0xcf) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) finit_module(r1, &(0x7f0000000880)='\x00', 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000800), 0x4) sendto$inet(r0, &(0x7f0000000040)="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", 0x6c1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0x7}, 0x0) 2018/05/08 18:55:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xc000000020011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001240)={{0x77359400}, {0x77359400}}, &(0x7f0000001200)) 2018/05/08 18:55:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6c696d697473009d76b33686a1") lseek(r0, 0x0, 0x1) 2018/05/08 18:55:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000040)={'nr0\x00', @ifru_settings={0x3, 0x0, @te1}}) 2018/05/08 18:55:42 executing program 0: r0 = memfd_create(&(0x7f0000000140)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000100), 0x80000000) fchmod(r0, 0x0) 2018/05/08 18:55:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001100)={'NETMAP\x00'}, &(0x7f0000001140)=0x1e) 2018/05/08 18:55:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) 2018/05/08 18:55:42 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) 2018/05/08 18:55:42 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') lchown(&(0x7f0000000240)='../file0\x00', 0x0, 0x0) 2018/05/08 18:55:42 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000200)) 2018/05/08 18:55:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:42 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='eth0trusted$eth0ppp1\'(\x00', 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) 2018/05/08 18:55:42 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @dev}, &(0x7f0000000200)=0xc) 2018/05/08 18:55:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000003f80)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) 2018/05/08 18:55:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) 2018/05/08 18:55:43 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010006c41180b598bc599868c62b2ca654a6613b6aab02000000bc832b0790ed00000000000000000000", 0x4c}], 0x1}, 0x0) 2018/05/08 18:55:43 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100}}], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @random="dc07382f6433", @local={0xfe, 0x80, [], 0xaa}}}}}, &(0x7f00000001c0)) 2018/05/08 18:55:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r1, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x3, 0x5f5, 0x5f2, 0x0, 0xffffffffffffffff, 0x0, [0x5]}, 0x2c) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x208, 0x0, 0x7, 0x406, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r3, 0x4c01) sync() name_to_handle_at(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740), 0x0) migrate_pages(0x0, 0x0, &(0x7f0000000540)=0x80, &(0x7f0000000580)=0x1) dup2(r3, r2) truncate(&(0x7f0000000780)='./file0\x00', 0x3) 2018/05/08 18:55:43 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@srh={0x0, 0x0, 0x4}, 0x8) [ 2498.378381] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 [ 2498.388642] IPVS: stopping master sync thread 7915 ... 2018/05/08 18:55:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:43 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bond0\x00', 0x400}) 2018/05/08 18:55:43 executing program 0: r0 = socket$inet(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000026c0)=[{0x10}], 0x10}, 0x0) 2018/05/08 18:55:43 executing program 7: r0 = socket(0x11, 0x800000003, 0x600081) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 2498.421613] IPVS: stopping master sync thread 7919 ... [ 2498.427178] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 2018/05/08 18:55:43 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) [ 2498.466347] netlink: 28 bytes leftover after parsing attributes in process `syz-executor5'. [ 2498.495608] bridge0: port 3(erspan0) entered disabled state [ 2498.501587] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/08 18:55:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2498.550082] device bridge0 left promiscuous mode 2018/05/08 18:55:43 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:43 executing program 0: perf_event_open(&(0x7f00002b5f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=',', 0x1}]) [ 2498.599236] netlink: 28 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/08 18:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:44 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:44 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xef) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/08 18:55:44 executing program 5: r0 = getpid() kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 2018/05/08 18:55:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x3ff) ftruncate(r1, 0x800) 2018/05/08 18:55:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/149, 0x854641f330458cad, 0x0, 0x0, 0xfd69) recvfrom$inet(r0, &(0x7f0000000000)=""/51, 0x95153dda668188a4, 0x0, 0x0, 0x11f) 2018/05/08 18:55:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/05/08 18:55:44 executing program 2: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='G', 0x1, 0xfffffffffffffffc) 2018/05/08 18:55:44 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="c1", 0x1, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 2018/05/08 18:55:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004df000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x9ac5, 0x3}) 2018/05/08 18:55:45 executing program 0: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x2}}, 0x26) sendto(r1, &(0x7f0000000000)="d17a28e9d7", 0x5, 0x84, &(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80) 2018/05/08 18:55:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000180)=@known='security.selinux\x00') 2018/05/08 18:55:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:45 executing program 4: keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000001540)=""/4, 0x4) 2018/05/08 18:55:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:45 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 2018/05/08 18:55:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004df000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x9ac5, 0x3}) 2018/05/08 18:55:45 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') 2018/05/08 18:55:45 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:45 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:45 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 2018/05/08 18:55:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x100000000000000, 0x485, 0x0, 0x0) 2018/05/08 18:55:46 executing program 5: r0 = socket(0x2000000000000a, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2c}}) 2018/05/08 18:55:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x10) setsockopt$inet_buf(r0, 0x0, 0x3, &(0x7f0000000180)="bf", 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], []]}, 0x678) 2018/05/08 18:55:46 executing program 4: request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='dns_resolver\x00', 0xffffffffffffffff) 2018/05/08 18:55:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:46 executing program 2: mkdir(&(0x7f0000249ff8)='./file0\x00', 0x0) chroot(&(0x7f0000fddff8)='./file0\x00') 2018/05/08 18:55:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0x1e13df6a}], 0x3b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/05/08 18:55:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x9, 0x0, "82aa2474c918f81ab460cb8e34042491d086c2226e7267e0f337db4ac53642b2c616d6a46f3ab22c4c9ade49e6fe815e6b0fd817e176ff8c84c08158531570d36ba3d37a1d5bd1c31b537f2fed6299d2"}, 0xd8) sendto$inet6(r0, &(0x7f0000eb9fff), 0x1000001be, 0x20000003, &(0x7f000031e000)={0xa}, 0x1c) 2018/05/08 18:55:46 executing program 5: r0 = socket(0x2000000000000a, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2c}}) 2018/05/08 18:55:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:46 executing program 0: fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.selinux\x00') 2018/05/08 18:55:46 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="e1", 0x1, 0xfffffffffffffffc) 2018/05/08 18:55:46 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:46 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:46 executing program 4: perf_event_open(&(0x7f00002b5f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000040)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') sendfile(r1, r2, &(0x7f0000057ff8), 0x10002) 2018/05/08 18:55:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:47 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000080)) r0 = syz_open_dev$random(&(0x7f00000012c0)='/dev/random\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000bad000)) 2018/05/08 18:55:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:47 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup3(r0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) 2018/05/08 18:55:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/85) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "6363b137320c95930c59969cadc01582529788e2d7889106f39c68a7b9e320a40b2d3cee3d4ab37b0dbc4fa84962ab4c87f8bdcad01f1741417232650ea0a8"}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f00000000c0)) ptrace(0x11, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) fchown(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x1000000000015) 2018/05/08 18:55:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:49 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:49 executing program 4: seccomp(0x1, 0x0, &(0x7f0000002900)={0x2, &(0x7f0000002880)=[{0x15, 0x0, 0x7f}, {}]}) 2018/05/08 18:55:49 executing program 2: lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)) 2018/05/08 18:55:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) unlink(&(0x7f0000000140)='./file1\x00') mknod$loop(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@broadcast}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@mcast1={0xff, 0x1, [], 0x1}}) 2018/05/08 18:55:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:49 executing program 0: ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$binfmt_elf32(r0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="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"], 0x1000) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000c40)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 2018/05/08 18:55:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004df000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x27fd) 2018/05/08 18:55:49 executing program 4: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=' ', 0x1}], 0x1, 0x0) 2018/05/08 18:55:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe801, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:49 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:49 executing program 5: r0 = socket(0x11, 0x803, 0x300) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) sendto$inet(r1, &(0x7f0000509f92), 0xff77, 0x0, &(0x7f000055fff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000014c0)=""/94, 0x5e}}, {{&(0x7f0000001540)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001980)=""/8, 0x8}}], 0x2, 0x0, 0x0) 2018/05/08 18:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getaddr={0x14, 0x16, 0x301}, 0x14}, 0x1}, 0x0) 2018/05/08 18:55:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x124, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:49 executing program 6: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0xffff, 0x1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22}, 0x10) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/05/08 18:55:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004df000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) close(r1) 2018/05/08 18:55:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x9, 0x0, "82aa2474c918f81ab460cb8e34042491d086c2226e7267e0f337db4ac54fd3b2c616d6a46f3ab22c4c9ade49e6fe815e6b0fd817e176ff8c84c0814c531570d36ba3d37a1d5bcec31b537f2fed6299d2"}, 0xd8) 2018/05/08 18:55:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f0000000000)) 2018/05/08 18:55:49 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:49 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) recvmmsg(r0, &(0x7f0000002600)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000001580), 0x0, &(0x7f0000001600)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='bridge_slave_1\x00', 0x271) writev(r0, &(0x7f0000000500), 0x26b) 2018/05/08 18:55:49 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) [ 2504.386351] rtc_cmos 00:00: Alarms can be up to one day in the future 2018/05/08 18:55:50 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000016ffc), 0x4) recvmsg(r1, &(0x7f0000000180)={0x0, 0x5c8, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000340)='V', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:55:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000010000800000000000000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/05/08 18:55:50 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x1ba) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x800000020000000, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/08 18:55:50 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 2018/05/08 18:55:50 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:50 executing program 7: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000ff00000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be180000000000000000000000000000000000000000000000000000000000000000000000000000000000008e5e7d73b1f16e1a0000000000000000000000eeff00000000000000000000000000000000000000020001007d00000000000000480001006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14, 0x80000) 2018/05/08 18:55:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:50 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r1) 2018/05/08 18:55:50 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:50 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:50 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x105041, 0x0) 2018/05/08 18:55:51 executing program 2: removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'user.', '(ppp1\x00'}) 2018/05/08 18:55:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 2018/05/08 18:55:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') fcntl$setlease(r0, 0x400, 0x0) 2018/05/08 18:55:51 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:51 executing program 4: request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0xfffffffffffffffe) 2018/05/08 18:55:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:51 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:51 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:51 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x5c8, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000340)='V', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:55:51 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:51 executing program 6: setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) clone(0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) 2018/05/08 18:55:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:51 executing program 2: syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) 2018/05/08 18:55:52 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:52 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4002, 0x0) 2018/05/08 18:55:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2) write$evdev(r0, &(0x7f0000037fe8)=[{{0x0, 0x2710}, 0x1, 0x51, 0x2}, {}], 0x30) 2018/05/08 18:55:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:52 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) 2018/05/08 18:55:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @broadcast=0xffffffff}}) 2018/05/08 18:55:52 executing program 6: setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) clone(0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) 2018/05/08 18:55:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:52 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x7f) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/239, 0x30f}], 0x344) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') connect$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x303, 0x0, 0x9, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 2018/05/08 18:55:52 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 2018/05/08 18:55:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9002000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:55:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:52 executing program 5: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:53 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') write$rdma_cm(r0, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00}, 0x20) 2018/05/08 18:55:53 executing program 5: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:53 executing program 6: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) 2018/05/08 18:55:53 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/08 18:55:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:55:53 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x4) write$evdev(r0, &(0x7f0000000100), 0x0) 2018/05/08 18:55:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:53 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:55:53 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) [ 2509.450287] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2509.455357] CPU: 0 PID: 8295 Comm: syz-executor4 Not tainted 4.17.0-rc4+ #64 [ 2509.462555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.471920] Call Trace: [ 2509.474529] dump_stack+0x1b9/0x294 [ 2509.478184] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2509.483396] ? kasan_check_write+0x14/0x20 [ 2509.487640] ? do_raw_spin_lock+0xc1/0x200 [ 2509.491870] handle_userfault.cold.32+0x44/0x5a [ 2509.496525] ? handle_userfault+0x16c6/0x2760 [ 2509.501018] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2509.505596] ? debug_check_no_locks_freed+0x310/0x310 [ 2509.510823] ? find_held_lock+0x36/0x1c0 [ 2509.514877] ? print_usage_bug+0xc0/0xc0 [ 2509.518938] ? print_usage_bug+0xc0/0xc0 [ 2509.522986] ? lock_downgrade+0x8e0/0x8e0 [ 2509.527126] ? finish_task_switch+0x182/0x810 [ 2509.531620] ? perf_trace_lock_acquire+0xe3/0x980 [ 2509.536457] ? check_noncircular+0x20/0x20 [ 2509.540684] ? __lock_acquire+0x7f5/0x5140 [ 2509.544903] ? _raw_spin_unlock_irq+0x27/0x70 [ 2509.549384] ? graph_lock+0x170/0x170 [ 2509.553267] ? find_held_lock+0x36/0x1c0 [ 2509.557316] ? lock_downgrade+0x8e0/0x8e0 [ 2509.561456] ? kasan_check_read+0x11/0x20 [ 2509.565589] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2509.569984] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2509.574558] ? kasan_check_write+0x14/0x20 [ 2509.578779] ? do_raw_spin_lock+0xc1/0x200 [ 2509.583006] __handle_mm_fault+0x38d8/0x4310 [ 2509.587413] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2509.592158] ? graph_lock+0x170/0x170 [ 2509.595948] ? find_held_lock+0x36/0x1c0 [ 2509.600039] ? lock_downgrade+0x8e0/0x8e0 [ 2509.604199] ? handle_mm_fault+0x8c0/0xc70 [ 2509.608428] handle_mm_fault+0x53a/0xc70 [ 2509.612483] ? __handle_mm_fault+0x4310/0x4310 [ 2509.617059] ? find_vma+0x34/0x190 [ 2509.620593] __do_page_fault+0x60b/0xe40 [ 2509.624654] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2509.629842] ? mm_fault_error+0x380/0x380 [ 2509.633997] ? graph_lock+0x170/0x170 [ 2509.637800] do_page_fault+0xee/0x8a7 [ 2509.641594] ? vmalloc_sync_all+0x30/0x30 [ 2509.645730] ? find_held_lock+0x36/0x1c0 [ 2509.649791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2509.654634] page_fault+0x1e/0x30 [ 2509.658080] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2509.663692] RSP: 0018:ffff88019f6278a8 EFLAGS: 00010203 [ 2509.669043] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2509.676297] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019f627978 [ 2509.683559] RBP: ffff88019f6278e0 R08: ffffed0033ec4f32 R09: ffffed0033ec4f2f [ 2509.690814] R10: ffffed0033ec4f31 R11: 0000000000000003 R12: 0000000020013014 [ 2509.698069] R13: 0000000020013000 R14: ffff88019f627978 R15: 00007ffffffff000 [ 2509.705345] ? _copy_from_user+0x10d/0x150 [ 2509.709571] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2509.714406] ? exit_robust_list+0x290/0x290 [ 2509.718716] ? snd_timer_user_open+0x180/0x180 [ 2509.723294] ? find_held_lock+0x36/0x1c0 [ 2509.727348] ? lock_downgrade+0x8e0/0x8e0 [ 2509.731492] ? kasan_check_read+0x11/0x20 [ 2509.735628] ? rcu_is_watching+0x85/0x140 [ 2509.739765] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2509.744949] ? __fget+0x40c/0x650 [ 2509.748402] ? expand_files.part.8+0x9a0/0x9a0 [ 2509.752969] ? trace_hardirqs_off+0xd/0x10 [ 2509.757195] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2509.762294] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2509.767398] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2509.772404] ? fget_raw+0x20/0x20 [ 2509.775849] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2509.780780] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2509.786482] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2509.791495] __ia32_compat_sys_ioctl+0x221/0x640 [ 2509.796252] do_fast_syscall_32+0x345/0xf9b [ 2509.800563] ? do_int80_syscall_32+0x880/0x880 [ 2509.805133] ? _raw_spin_unlock_irq+0x27/0x70 [ 2509.809619] ? finish_task_switch+0x1ca/0x810 [ 2509.814110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2509.819642] ? syscall_return_slowpath+0x30f/0x5c0 [ 2509.825428] ? sysret32_from_system_call+0x5/0x46 [ 2509.830270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2509.835121] entry_SYSENTER_compat+0x70/0x7f [ 2509.839520] RIP: 0023:0xf7fa8cb9 [ 2509.842865] RSP: 002b:00000000f5fa40ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/08 18:55:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:55 executing program 5: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:55 executing program 6: prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) 2018/05/08 18:55:55 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22f49ed148244f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/05/08 18:55:55 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:55:55 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:55:55 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'eql\x00'}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x200}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xcc4}, 0x10) [ 2509.850563] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2509.857819] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2509.865075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2509.872333] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2509.879587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:55:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:55 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2510.081661] IPVS: stopping backup sync thread 25078 ... 2018/05/08 18:55:55 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:55:55 executing program 7: syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') 2018/05/08 18:55:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/05/08 18:55:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:55 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:55 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'eql\x00'}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x200}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xcc4}, 0x10) 2018/05/08 18:55:55 executing program 1: pipe(&(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/08 18:55:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2510.740746] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2510.745336] CPU: 0 PID: 8305 Comm: syz-executor4 Not tainted 4.17.0-rc4+ #64 [ 2510.752517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.761856] Call Trace: [ 2510.764442] dump_stack+0x1b9/0x294 [ 2510.768068] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2510.773257] ? kasan_check_write+0x14/0x20 [ 2510.777493] ? do_raw_spin_lock+0xc1/0x200 [ 2510.781723] handle_userfault.cold.32+0x44/0x5a [ 2510.786380] ? handle_userfault+0x16c6/0x2760 [ 2510.790876] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2510.795445] ? debug_check_no_locks_freed+0x310/0x310 [ 2510.800629] ? find_held_lock+0x36/0x1c0 [ 2510.804683] ? print_usage_bug+0xc0/0xc0 [ 2510.808731] ? print_usage_bug+0xc0/0xc0 [ 2510.812779] ? lock_downgrade+0x8e0/0x8e0 [ 2510.816917] ? finish_task_switch+0x182/0x810 [ 2510.821418] ? kasan_check_read+0x11/0x20 [ 2510.825566] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2510.829968] ? check_noncircular+0x20/0x20 [ 2510.834196] ? __lock_acquire+0x7f5/0x5140 [ 2510.838418] ? _raw_spin_unlock_irq+0x27/0x70 [ 2510.842903] ? graph_lock+0x170/0x170 [ 2510.846711] ? find_held_lock+0x36/0x1c0 [ 2510.850766] ? lock_downgrade+0x8e0/0x8e0 [ 2510.854917] ? kasan_check_read+0x11/0x20 [ 2510.859055] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2510.863451] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2510.868038] ? kasan_check_write+0x14/0x20 [ 2510.872264] ? do_raw_spin_lock+0xc1/0x200 [ 2510.876497] __handle_mm_fault+0x38d8/0x4310 [ 2510.880905] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2510.885653] ? graph_lock+0x170/0x170 [ 2510.889444] ? find_held_lock+0x36/0x1c0 [ 2510.893499] ? lock_downgrade+0x8e0/0x8e0 [ 2510.897645] ? handle_mm_fault+0x8c0/0xc70 [ 2510.901870] handle_mm_fault+0x53a/0xc70 [ 2510.905921] ? __handle_mm_fault+0x4310/0x4310 [ 2510.910492] ? find_vma+0x34/0x190 [ 2510.914030] __do_page_fault+0x60b/0xe40 [ 2510.918082] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2510.923279] ? mm_fault_error+0x380/0x380 [ 2510.927413] ? graph_lock+0x170/0x170 [ 2510.931204] do_page_fault+0xee/0x8a7 [ 2510.934995] ? vmalloc_sync_all+0x30/0x30 [ 2510.939134] ? find_held_lock+0x36/0x1c0 [ 2510.943191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2510.948033] page_fault+0x1e/0x30 [ 2510.951472] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2510.957080] RSP: 0018:ffff88019cd5f8a8 EFLAGS: 00010203 [ 2510.962429] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2510.969683] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019cd5f978 [ 2510.976939] RBP: ffff88019cd5f8e0 R08: ffffed00339abf32 R09: ffffed00339abf2f [ 2510.984197] R10: ffffed00339abf31 R11: 0000000000000003 R12: 0000000020013014 [ 2510.991460] R13: 0000000020013000 R14: ffff88019cd5f978 R15: 00007ffffffff000 [ 2510.998737] ? _copy_from_user+0x10d/0x150 [ 2511.002965] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2511.007799] ? exit_robust_list+0x290/0x290 [ 2511.012110] ? is_bpf_text_address+0xd7/0x170 [ 2511.016602] ? snd_timer_user_open+0x180/0x180 [ 2511.021175] ? find_held_lock+0x36/0x1c0 [ 2511.025238] ? lock_downgrade+0x8e0/0x8e0 [ 2511.029379] ? kasan_check_read+0x11/0x20 [ 2511.033514] ? rcu_is_watching+0x85/0x140 [ 2511.037649] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2511.042833] ? __fget+0x40c/0x650 [ 2511.046282] ? expand_files.part.8+0x9a0/0x9a0 [ 2511.050852] ? trace_hardirqs_off+0xd/0x10 [ 2511.055076] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2511.060179] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2511.065274] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2511.070279] ? fget_raw+0x20/0x20 [ 2511.073728] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2511.078651] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2511.084350] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2511.089355] __ia32_compat_sys_ioctl+0x221/0x640 [ 2511.094106] do_fast_syscall_32+0x345/0xf9b [ 2511.098422] ? do_int80_syscall_32+0x880/0x880 [ 2511.102991] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2511.107834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2511.113358] ? syscall_return_slowpath+0x30f/0x5c0 [ 2511.118287] ? sysret32_from_system_call+0x5/0x46 [ 2511.123124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2511.127958] entry_SYSENTER_compat+0x70/0x7f [ 2511.132351] RIP: 0023:0xf7fa8cb9 [ 2511.135700] RSP: 002b:00000000f5fa40ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2511.143399] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2511.150655] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2511.157912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2511.165168] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2511.172436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2511.187829] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2511.192474] CPU: 1 PID: 8331 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2511.199676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.209040] Call Trace: [ 2511.211656] dump_stack+0x1b9/0x294 [ 2511.215305] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2511.220527] ? kasan_check_write+0x14/0x20 [ 2511.224787] ? do_raw_spin_lock+0xc1/0x200 [ 2511.229055] handle_userfault.cold.32+0x44/0x5a [ 2511.233835] ? handle_userfault+0x16c6/0x2760 [ 2511.238330] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2511.242939] ? debug_check_no_locks_freed+0x310/0x310 [ 2511.248118] ? find_held_lock+0x36/0x1c0 [ 2511.252170] ? print_usage_bug+0xc0/0xc0 [ 2511.256232] ? print_usage_bug+0xc0/0xc0 [ 2511.260295] ? lock_downgrade+0x8e0/0x8e0 [ 2511.264456] ? finish_task_switch+0x182/0x810 [ 2511.268955] ? perf_trace_lock_acquire+0xe3/0x980 [ 2511.273791] ? check_noncircular+0x20/0x20 [ 2511.278025] ? __lock_acquire+0x7f5/0x5140 [ 2511.282245] ? _raw_spin_unlock_irq+0x27/0x70 [ 2511.286727] ? graph_lock+0x170/0x170 [ 2511.290525] ? find_held_lock+0x36/0x1c0 [ 2511.294581] ? lock_downgrade+0x8e0/0x8e0 [ 2511.298721] ? kasan_check_read+0x11/0x20 [ 2511.302862] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2511.307257] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2511.311838] ? kasan_check_write+0x14/0x20 [ 2511.316073] ? do_raw_spin_lock+0xc1/0x200 [ 2511.320303] __handle_mm_fault+0x38d8/0x4310 [ 2511.324705] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2511.329447] ? graph_lock+0x170/0x170 [ 2511.333237] ? find_held_lock+0x36/0x1c0 [ 2511.337300] ? lock_downgrade+0x8e0/0x8e0 [ 2511.341442] ? handle_mm_fault+0x8c0/0xc70 [ 2511.345673] handle_mm_fault+0x53a/0xc70 [ 2511.349723] ? __handle_mm_fault+0x4310/0x4310 [ 2511.354295] ? find_vma+0x34/0x190 [ 2511.357827] __do_page_fault+0x60b/0xe40 [ 2511.361878] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2511.367060] ? mm_fault_error+0x380/0x380 [ 2511.371194] ? graph_lock+0x170/0x170 [ 2511.374993] do_page_fault+0xee/0x8a7 [ 2511.378790] ? vmalloc_sync_all+0x30/0x30 [ 2511.382929] ? find_held_lock+0x36/0x1c0 [ 2511.386984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2511.391918] page_fault+0x1e/0x30 [ 2511.395361] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2511.400970] RSP: 0018:ffff8801b247f8a8 EFLAGS: 00010203 [ 2511.406321] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2511.413584] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801b247f978 [ 2511.420842] RBP: ffff8801b247f8e0 R08: ffffed003648ff32 R09: ffffed003648ff2f [ 2511.428099] R10: ffffed003648ff31 R11: 0000000000000003 R12: 0000000020013014 [ 2511.435355] R13: 0000000020013000 R14: ffff8801b247f978 R15: 00007ffffffff000 [ 2511.442633] ? _copy_from_user+0x10d/0x150 [ 2511.446872] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2511.451704] ? exit_robust_list+0x290/0x290 [ 2511.456020] ? snd_timer_user_open+0x180/0x180 [ 2511.460592] ? find_held_lock+0x36/0x1c0 [ 2511.464646] ? lock_downgrade+0x8e0/0x8e0 [ 2511.468785] ? kasan_check_read+0x11/0x20 [ 2511.472920] ? rcu_is_watching+0x85/0x140 [ 2511.477055] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2511.482238] ? __fget+0x40c/0x650 [ 2511.485686] ? expand_files.part.8+0x9a0/0x9a0 [ 2511.490260] ? trace_hardirqs_off+0xd/0x10 [ 2511.494491] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2511.499594] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2511.504689] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2511.509699] ? fget_raw+0x20/0x20 [ 2511.513148] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2511.518068] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2511.523772] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2511.528778] __ia32_compat_sys_ioctl+0x221/0x640 [ 2511.533530] do_fast_syscall_32+0x345/0xf9b [ 2511.537842] ? do_int80_syscall_32+0x880/0x880 [ 2511.542413] ? _raw_spin_unlock_irq+0x27/0x70 [ 2511.547514] ? finish_task_switch+0x1ca/0x810 [ 2511.552000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2511.557537] ? syscall_return_slowpath+0x30f/0x5c0 [ 2511.562465] ? sysret32_from_system_call+0x5/0x46 [ 2511.567302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2511.572134] entry_SYSENTER_compat+0x70/0x7f [ 2511.576529] RIP: 0023:0xf7fd4cb9 [ 2511.579876] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/08 18:55:56 executing program 7: r0 = memfd_create(&(0x7f0000000080)="7d7d9574686f5e707230630100000400001e0070ff6f630ff8", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0xffdffffffffffffe, "7175657565310000000000000000000000001200"}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}], 0xffffff00) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000027fb0)={0x203, @time={0x77359400}}) 2018/05/08 18:55:56 executing program 5: mkdir(&(0x7f0000249ff8)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') poll(&(0x7f0000f59fc8)=[{r0}], 0x1, 0x80000000) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:55:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:55:56 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:55:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/05/08 18:55:56 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'eql\x00'}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x200}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xcc4}, 0x10) 2018/05/08 18:55:56 executing program 1: pipe(&(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2511.587574] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2511.594833] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2511.602091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2511.609359] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2511.616615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:55:56 executing program 1: pipe(&(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) [ 2511.829107] binder: 8360:8369 transaction failed 29189/-22, size 0-0 line 2856 [ 2511.890828] binder: undelivered TRANSACTION_ERROR: 29189 [ 2512.517942] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2512.522557] CPU: 0 PID: 8371 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2512.529740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.539099] Call Trace: [ 2512.541697] dump_stack+0x1b9/0x294 [ 2512.545316] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2512.550519] ? kasan_check_write+0x14/0x20 [ 2512.554776] ? do_raw_spin_lock+0xc1/0x200 [ 2512.559016] handle_userfault.cold.32+0x44/0x5a [ 2512.563678] ? handle_userfault+0x16c6/0x2760 [ 2512.568167] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2512.572743] ? debug_check_no_locks_freed+0x310/0x310 [ 2512.577938] ? find_held_lock+0x36/0x1c0 [ 2512.581999] ? print_usage_bug+0xc0/0xc0 [ 2512.586060] ? print_usage_bug+0xc0/0xc0 [ 2512.590111] ? lock_downgrade+0x8e0/0x8e0 [ 2512.594247] ? finish_task_switch+0x182/0x810 [ 2512.598735] ? perf_trace_lock_acquire+0xe3/0x980 [ 2512.603567] ? check_noncircular+0x20/0x20 [ 2512.607792] ? __lock_acquire+0x7f5/0x5140 [ 2512.612014] ? _raw_spin_unlock_irq+0x27/0x70 [ 2512.616514] ? graph_lock+0x170/0x170 [ 2512.620308] ? find_held_lock+0x36/0x1c0 [ 2512.624361] ? lock_downgrade+0x8e0/0x8e0 [ 2512.628502] ? kasan_check_read+0x11/0x20 [ 2512.632640] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2512.637039] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2512.641622] ? kasan_check_write+0x14/0x20 [ 2512.645846] ? do_raw_spin_lock+0xc1/0x200 [ 2512.650072] __handle_mm_fault+0x38d8/0x4310 [ 2512.654471] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2512.659210] ? graph_lock+0x170/0x170 [ 2512.663001] ? find_held_lock+0x36/0x1c0 [ 2512.667060] ? lock_downgrade+0x8e0/0x8e0 [ 2512.671207] ? handle_mm_fault+0x8c0/0xc70 [ 2512.675432] handle_mm_fault+0x53a/0xc70 [ 2512.679484] ? __handle_mm_fault+0x4310/0x4310 [ 2512.684059] ? find_vma+0x34/0x190 [ 2512.687588] __do_page_fault+0x60b/0xe40 [ 2512.691636] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2512.696819] ? mm_fault_error+0x380/0x380 [ 2512.700965] ? graph_lock+0x170/0x170 [ 2512.704756] do_page_fault+0xee/0x8a7 [ 2512.708553] ? vmalloc_sync_all+0x30/0x30 [ 2512.712688] ? find_held_lock+0x36/0x1c0 [ 2512.716745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2512.721581] page_fault+0x1e/0x30 [ 2512.725025] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2512.730633] RSP: 0018:ffff88019bddf8a8 EFLAGS: 00010203 [ 2512.735981] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2512.743235] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019bddf978 [ 2512.750490] RBP: ffff88019bddf8e0 R08: ffffed00337bbf32 R09: ffffed00337bbf2f [ 2512.757755] R10: ffffed00337bbf31 R11: 0000000000000003 R12: 0000000020013014 [ 2512.765011] R13: 0000000020013000 R14: ffff88019bddf978 R15: 00007ffffffff000 [ 2512.772291] ? _copy_from_user+0x10d/0x150 [ 2512.776520] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2512.781353] ? exit_robust_list+0x290/0x290 [ 2512.785666] ? snd_timer_user_open+0x180/0x180 [ 2512.790237] ? find_held_lock+0x36/0x1c0 [ 2512.794292] ? lock_downgrade+0x8e0/0x8e0 [ 2512.798432] ? kasan_check_read+0x11/0x20 [ 2512.802567] ? rcu_is_watching+0x85/0x140 [ 2512.806704] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2512.811905] ? __fget+0x40c/0x650 [ 2512.815353] ? expand_files.part.8+0x9a0/0x9a0 [ 2512.819926] ? trace_hardirqs_off+0xd/0x10 [ 2512.824148] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2512.829256] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2512.834349] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2512.839356] ? fget_raw+0x20/0x20 [ 2512.842809] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2512.847731] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2512.853439] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2512.858460] __ia32_compat_sys_ioctl+0x221/0x640 [ 2512.863209] do_fast_syscall_32+0x345/0xf9b [ 2512.867529] ? do_int80_syscall_32+0x880/0x880 [ 2512.872102] ? kasan_check_write+0x14/0x20 [ 2512.876330] ? syscall_return_slowpath+0x30f/0x5c0 [ 2512.881254] ? sysret32_from_system_call+0x5/0x46 [ 2512.886090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2512.890922] entry_SYSENTER_compat+0x70/0x7f [ 2512.895315] RIP: 0023:0xf7fd4cb9 [ 2512.898665] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2512.906369] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2512.913624] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2512.920874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2512.928131] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2512.935387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:55:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:58 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'eql\x00'}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x200}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xcc4}, 0x10) 2018/05/08 18:55:58 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/05/08 18:55:58 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100)='/dev/ptmx\x00', 0x0, 0x0) 2018/05/08 18:55:58 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/05/08 18:55:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:58 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:55:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/05/08 18:55:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:58 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x401, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/05/08 18:55:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/05/08 18:55:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) getpeername(r0, &(0x7f0000000700)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000780)=0x80) 2018/05/08 18:55:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) 2018/05/08 18:55:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:58 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/05/08 18:55:58 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:55:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004df000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 2018/05/08 18:55:58 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) 2018/05/08 18:55:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x852, r0, 0x0) 2018/05/08 18:55:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f0000000d80), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 2513.860848] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2513.865455] CPU: 0 PID: 8397 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2513.872635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.881988] Call Trace: [ 2513.884587] dump_stack+0x1b9/0x294 [ 2513.888233] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2513.893419] ? kasan_check_write+0x14/0x20 [ 2513.897653] ? do_raw_spin_lock+0xc1/0x200 [ 2513.901883] handle_userfault.cold.32+0x44/0x5a [ 2513.906554] ? handle_userfault+0x16c6/0x2760 [ 2513.911045] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2513.915620] ? debug_check_no_locks_freed+0x310/0x310 [ 2513.920798] ? find_held_lock+0x36/0x1c0 [ 2513.924849] ? print_usage_bug+0xc0/0xc0 [ 2513.928899] ? print_usage_bug+0xc0/0xc0 [ 2513.932944] ? lock_downgrade+0x8e0/0x8e0 [ 2513.937077] ? finish_task_switch+0x182/0x810 [ 2513.941571] ? kasan_check_read+0x11/0x20 [ 2513.945711] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2513.950108] ? check_noncircular+0x20/0x20 [ 2513.954344] ? __lock_acquire+0x7f5/0x5140 [ 2513.958580] ? _raw_spin_unlock_irq+0x27/0x70 [ 2513.963064] ? graph_lock+0x170/0x170 [ 2513.966858] ? find_held_lock+0x36/0x1c0 [ 2513.970911] ? lock_downgrade+0x8e0/0x8e0 [ 2513.975057] ? kasan_check_read+0x11/0x20 [ 2513.979192] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2513.983587] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2513.988161] ? kasan_check_write+0x14/0x20 [ 2513.992395] ? do_raw_spin_lock+0xc1/0x200 [ 2513.996625] __handle_mm_fault+0x38d8/0x4310 [ 2514.001034] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2514.005782] ? graph_lock+0x170/0x170 [ 2514.009570] ? find_held_lock+0x36/0x1c0 [ 2514.013626] ? lock_downgrade+0x8e0/0x8e0 [ 2514.017780] ? handle_mm_fault+0x8c0/0xc70 [ 2514.022018] handle_mm_fault+0x53a/0xc70 [ 2514.026072] ? __handle_mm_fault+0x4310/0x4310 [ 2514.030654] ? find_vma+0x34/0x190 [ 2514.034192] __do_page_fault+0x60b/0xe40 [ 2514.038245] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2514.043435] ? mm_fault_error+0x380/0x380 [ 2514.047571] ? graph_lock+0x170/0x170 [ 2514.051364] do_page_fault+0xee/0x8a7 [ 2514.055156] ? vmalloc_sync_all+0x30/0x30 [ 2514.059293] ? find_held_lock+0x36/0x1c0 [ 2514.063353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2514.068186] page_fault+0x1e/0x30 [ 2514.071625] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2514.077233] RSP: 0018:ffff8801ca94f8a8 EFLAGS: 00010203 [ 2514.082589] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2514.089844] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801ca94f978 [ 2514.097099] RBP: ffff8801ca94f8e0 R08: ffffed0039529f32 R09: ffffed0039529f2f [ 2514.104365] R10: ffffed0039529f31 R11: 0000000000000003 R12: 0000000020013014 [ 2514.111624] R13: 0000000020013000 R14: ffff8801ca94f978 R15: 00007ffffffff000 [ 2514.118903] ? _copy_from_user+0x10d/0x150 [ 2514.123138] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2514.127972] ? exit_robust_list+0x290/0x290 [ 2514.132289] ? is_bpf_text_address+0xd7/0x170 [ 2514.136782] ? snd_timer_user_open+0x180/0x180 [ 2514.141354] ? find_held_lock+0x36/0x1c0 [ 2514.145412] ? lock_downgrade+0x8e0/0x8e0 [ 2514.149557] ? kasan_check_read+0x11/0x20 [ 2514.153704] ? rcu_is_watching+0x85/0x140 [ 2514.157840] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2514.163029] ? __fget+0x40c/0x650 [ 2514.166478] ? expand_files.part.8+0x9a0/0x9a0 [ 2514.171046] ? trace_hardirqs_off+0xd/0x10 [ 2514.175269] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2514.180371] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2514.185465] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2514.190470] ? fget_raw+0x20/0x20 [ 2514.193915] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2514.198836] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2514.204541] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2514.209546] __ia32_compat_sys_ioctl+0x221/0x640 [ 2514.214295] do_fast_syscall_32+0x345/0xf9b [ 2514.218608] ? do_int80_syscall_32+0x880/0x880 [ 2514.223175] ? _raw_spin_unlock_irq+0x27/0x70 [ 2514.227660] ? finish_task_switch+0x1ca/0x810 [ 2514.232149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2514.237698] ? syscall_return_slowpath+0x30f/0x5c0 [ 2514.242629] ? sysret32_from_system_call+0x5/0x46 [ 2514.247473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2514.252318] entry_SYSENTER_compat+0x70/0x7f [ 2514.256717] RIP: 0023:0xf7fd4cb9 [ 2514.260068] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2514.267765] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2514.275027] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2514.282286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2514.289542] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2514.296799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:55:59 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) poll(&(0x7f00000011c0), 0x0, 0x0) 2018/05/08 18:55:59 executing program 4: inotify_init1(0x0) 2018/05/08 18:55:59 executing program 5: chdir(&(0x7f0000000400)='./file1\x00') 2018/05/08 18:55:59 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000040)=@rc, 0x7c, &(0x7f0000001580), 0x0, &(0x7f0000001600)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='bridge_slave_1\x00', 0x271) writev(r0, &(0x7f0000000500), 0x26b) 2018/05/08 18:55:59 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) 2018/05/08 18:55:59 executing program 1: r0 = socket(0x0, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:59 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:55:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:59 executing program 1: r0 = socket(0x0, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:55:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, r0, 0x0) 2018/05/08 18:55:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:55:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000600)='ramfs\x00', 0x81a, &(0x7f0000000080)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000680)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000100)='ubifs\x00', 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x8003080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f00000e7000)) mount(&(0x7f0000000040)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x4, &(0x7f0000000100)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 2515.169256] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2515.173898] CPU: 1 PID: 8444 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2515.181098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.190465] Call Trace: [ 2515.193077] dump_stack+0x1b9/0x294 [ 2515.196715] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2515.201913] ? kasan_check_write+0x14/0x20 [ 2515.206181] ? do_raw_spin_lock+0xc1/0x200 [ 2515.210422] handle_userfault.cold.32+0x44/0x5a [ 2515.215083] ? handle_userfault+0x16c6/0x2760 [ 2515.219576] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2515.224164] ? debug_check_no_locks_freed+0x310/0x310 [ 2515.229366] ? find_held_lock+0x36/0x1c0 [ 2515.233436] ? print_usage_bug+0xc0/0xc0 [ 2515.237488] ? print_usage_bug+0xc0/0xc0 [ 2515.241546] ? lock_downgrade+0x8e0/0x8e0 [ 2515.245692] ? finish_task_switch+0x182/0x810 [ 2515.250193] ? perf_trace_lock_acquire+0xe3/0x980 [ 2515.255048] ? check_noncircular+0x20/0x20 [ 2515.259309] ? __lock_acquire+0x7f5/0x5140 [ 2515.263544] ? _raw_spin_unlock_irq+0x27/0x70 [ 2515.268038] ? graph_lock+0x170/0x170 [ 2515.271834] ? find_held_lock+0x36/0x1c0 [ 2515.275901] ? lock_downgrade+0x8e0/0x8e0 [ 2515.280924] ? kasan_check_read+0x11/0x20 [ 2515.285073] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2515.289481] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2515.294069] ? kasan_check_write+0x14/0x20 [ 2515.298298] ? do_raw_spin_lock+0xc1/0x200 [ 2515.302531] __handle_mm_fault+0x38d8/0x4310 [ 2515.306935] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2515.311689] ? graph_lock+0x170/0x170 [ 2515.315485] ? find_held_lock+0x36/0x1c0 [ 2515.319543] ? lock_downgrade+0x8e0/0x8e0 [ 2515.323694] ? handle_mm_fault+0x8c0/0xc70 [ 2515.327924] handle_mm_fault+0x53a/0xc70 [ 2515.331978] ? __handle_mm_fault+0x4310/0x4310 [ 2515.336554] ? find_vma+0x34/0x190 [ 2515.340091] __do_page_fault+0x60b/0xe40 [ 2515.344155] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2515.349349] ? mm_fault_error+0x380/0x380 [ 2515.353486] ? graph_lock+0x170/0x170 [ 2515.357278] do_page_fault+0xee/0x8a7 [ 2515.361076] ? vmalloc_sync_all+0x30/0x30 [ 2515.365212] ? find_held_lock+0x36/0x1c0 [ 2515.369279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2515.374129] page_fault+0x1e/0x30 [ 2515.377575] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2515.383181] RSP: 0018:ffff880196c678a8 EFLAGS: 00010203 [ 2515.388526] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2515.395791] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880196c67978 [ 2515.403069] RBP: ffff880196c678e0 R08: ffffed0032d8cf32 R09: ffffed0032d8cf2f [ 2515.410342] R10: ffffed0032d8cf31 R11: 0000000000000003 R12: 0000000020013014 [ 2515.417608] R13: 0000000020013000 R14: ffff880196c67978 R15: 00007ffffffff000 [ 2515.424882] ? _copy_from_user+0x10d/0x150 [ 2515.429107] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2515.433934] ? exit_robust_list+0x290/0x290 [ 2515.438238] ? snd_timer_user_open+0x180/0x180 [ 2515.442801] ? find_held_lock+0x36/0x1c0 [ 2515.446847] ? lock_downgrade+0x8e0/0x8e0 [ 2515.450980] ? kasan_check_read+0x11/0x20 [ 2515.455109] ? rcu_is_watching+0x85/0x140 [ 2515.459245] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2515.464436] ? __fget+0x40c/0x650 [ 2515.467876] ? expand_files.part.8+0x9a0/0x9a0 [ 2515.472454] ? trace_hardirqs_off+0xd/0x10 [ 2515.476689] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2515.481784] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2515.486875] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2515.491882] ? fget_raw+0x20/0x20 [ 2515.495335] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2515.500270] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2515.505970] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2515.510973] __ia32_compat_sys_ioctl+0x221/0x640 [ 2515.515729] do_fast_syscall_32+0x345/0xf9b [ 2515.520046] ? do_int80_syscall_32+0x880/0x880 [ 2515.524626] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2515.529463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.534986] ? syscall_return_slowpath+0x30f/0x5c0 [ 2515.539919] ? sysret32_from_system_call+0x5/0x46 [ 2515.544766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2515.549611] entry_SYSENTER_compat+0x70/0x7f [ 2515.554004] RIP: 0023:0xf7fd4cb9 [ 2515.557360] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/08 18:56:00 executing program 1: r0 = socket(0x0, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 2018/05/08 18:56:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7403, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:00 executing program 5: setgroups(0x0, &(0x7f00000001c0)) 2018/05/08 18:56:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 2018/05/08 18:56:00 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) 2018/05/08 18:56:00 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) poll(&(0x7f00000011c0), 0x0, 0x0) [ 2515.565060] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2515.572317] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2515.579572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2515.586826] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2515.594081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:00 executing program 1: r0 = socket(0x10, 0x0, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:00 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) poll(&(0x7f00000011c0), 0x0, 0x0) 2018/05/08 18:56:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x290, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 2018/05/08 18:56:01 executing program 1: r0 = socket(0x10, 0x0, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:01 executing program 1: r0 = socket(0x10, 0x0, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) [ 2516.585617] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2516.590243] CPU: 1 PID: 8490 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2516.597434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.606794] Call Trace: [ 2516.609396] dump_stack+0x1b9/0x294 [ 2516.613049] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2516.618265] ? kasan_check_write+0x14/0x20 [ 2516.622519] ? do_raw_spin_lock+0xc1/0x200 [ 2516.626781] handle_userfault.cold.32+0x44/0x5a [ 2516.631475] ? handle_userfault+0x16c6/0x2760 [ 2516.635991] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2516.640583] ? debug_check_no_locks_freed+0x310/0x310 [ 2516.645763] ? find_held_lock+0x36/0x1c0 [ 2516.649829] ? print_usage_bug+0xc0/0xc0 [ 2516.653906] ? print_usage_bug+0xc0/0xc0 [ 2516.657971] ? lock_downgrade+0x8e0/0x8e0 [ 2516.662109] ? finish_task_switch+0x182/0x810 [ 2516.666600] ? perf_trace_lock_acquire+0xe3/0x980 [ 2516.671445] ? check_noncircular+0x20/0x20 [ 2516.675676] ? __lock_acquire+0x7f5/0x5140 [ 2516.679911] ? _raw_spin_unlock_irq+0x27/0x70 [ 2516.684412] ? graph_lock+0x170/0x170 [ 2516.688212] ? find_held_lock+0x36/0x1c0 [ 2516.692279] ? lock_downgrade+0x8e0/0x8e0 [ 2516.696447] ? kasan_check_read+0x11/0x20 [ 2516.700609] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2516.705022] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2516.709608] ? kasan_check_write+0x14/0x20 [ 2516.713860] ? do_raw_spin_lock+0xc1/0x200 [ 2516.718122] __handle_mm_fault+0x38d8/0x4310 [ 2516.722561] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2516.727329] ? graph_lock+0x170/0x170 [ 2516.731154] ? find_held_lock+0x36/0x1c0 [ 2516.735245] ? lock_downgrade+0x8e0/0x8e0 [ 2516.739386] ? handle_mm_fault+0x8c0/0xc70 [ 2516.743609] handle_mm_fault+0x53a/0xc70 [ 2516.747664] ? __handle_mm_fault+0x4310/0x4310 [ 2516.752243] ? find_vma+0x34/0x190 [ 2516.755768] __do_page_fault+0x60b/0xe40 [ 2516.759815] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2516.764993] ? mm_fault_error+0x380/0x380 [ 2516.769136] ? graph_lock+0x170/0x170 [ 2516.772924] do_page_fault+0xee/0x8a7 [ 2516.776713] ? vmalloc_sync_all+0x30/0x30 [ 2516.780846] ? find_held_lock+0x36/0x1c0 [ 2516.784897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2516.789729] page_fault+0x1e/0x30 [ 2516.793168] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2516.798771] RSP: 0018:ffff8801ca5478a8 EFLAGS: 00010203 [ 2516.804117] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2516.811369] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801ca547978 [ 2516.818621] RBP: ffff8801ca5478e0 R08: ffffed00394a8f32 R09: ffffed00394a8f2f [ 2516.825876] R10: ffffed00394a8f31 R11: 0000000000000003 R12: 0000000020013014 [ 2516.833131] R13: 0000000020013000 R14: ffff8801ca547978 R15: 00007ffffffff000 [ 2516.840408] ? _copy_from_user+0x10d/0x150 [ 2516.844647] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2516.849490] ? exit_robust_list+0x290/0x290 [ 2516.853809] ? snd_timer_user_open+0x180/0x180 [ 2516.858380] ? find_held_lock+0x36/0x1c0 [ 2516.862437] ? lock_downgrade+0x8e0/0x8e0 [ 2516.866581] ? kasan_check_read+0x11/0x20 [ 2516.870730] ? rcu_is_watching+0x85/0x140 [ 2516.874875] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2516.880057] ? __fget+0x40c/0x650 [ 2516.883500] ? expand_files.part.8+0x9a0/0x9a0 [ 2516.888089] ? trace_hardirqs_off+0xd/0x10 [ 2516.892312] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2516.897407] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2516.902494] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2516.907497] ? fget_raw+0x20/0x20 [ 2516.910941] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2516.915857] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2516.921560] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2516.926565] __ia32_compat_sys_ioctl+0x221/0x640 [ 2516.931322] do_fast_syscall_32+0x345/0xf9b [ 2516.935647] ? do_int80_syscall_32+0x880/0x880 [ 2516.940212] ? _raw_spin_unlock_irq+0x27/0x70 [ 2516.944705] ? finish_task_switch+0x1ca/0x810 [ 2516.949202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2516.954736] ? syscall_return_slowpath+0x30f/0x5c0 [ 2516.959656] ? sysret32_from_system_call+0x5/0x46 [ 2516.964502] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2516.969335] entry_SYSENTER_compat+0x70/0x7f [ 2516.973726] RIP: 0023:0xf7fd4cb9 [ 2516.977078] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/08 18:56:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@hopopts={0x5e, 0x1, [], [@pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x9a}]}, 0x18) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000014000086dd60d8652b00140600fe8000000000000000000000000000aafe800000b100000000000000000000aa00004e20103638a2d76c1b34dd3e3e56df57fd8e6dee5f2d70650152e834c6eb52629ad2279047bb831794161c11378e2b537614c19c289c83ca32cbda21ed9d91a71e94e783a78a14277db0fb8323b38ef599e74b621075c9b3c3c51bbacd811426d13cb6fbe699c1ab72367a847c398bde11d42a5922f6", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 2018/05/08 18:56:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:02 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/177, 0x1f}) 2018/05/08 18:56:02 executing program 7: r0 = memfd_create(&(0x7f0000000140)='\x00', 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/08 18:56:02 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) 2018/05/08 18:56:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/254, &(0x7f0000000180)=0xfe) [ 2516.984771] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2516.992030] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2516.999283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2517.006537] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2517.013800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:02 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) 2018/05/08 18:56:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x3ff) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x800) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:56:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:02 executing program 7: 2018/05/08 18:56:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) [ 2517.442298] print_req_error: I/O error, dev loop0, sector 0 [ 2517.907182] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2517.911766] CPU: 0 PID: 8534 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2517.918974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.928317] Call Trace: [ 2517.930903] dump_stack+0x1b9/0x294 [ 2517.934524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2517.939712] ? kasan_check_write+0x14/0x20 [ 2517.943942] ? do_raw_spin_lock+0xc1/0x200 [ 2517.948172] handle_userfault.cold.32+0x44/0x5a [ 2517.952831] ? handle_userfault+0x16c6/0x2760 [ 2517.957318] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2517.961904] ? debug_check_no_locks_freed+0x310/0x310 [ 2517.967080] ? find_held_lock+0x36/0x1c0 [ 2517.971127] ? print_usage_bug+0xc0/0xc0 [ 2517.975175] ? print_usage_bug+0xc0/0xc0 [ 2517.979219] ? lock_downgrade+0x8e0/0x8e0 [ 2517.983352] ? finish_task_switch+0x182/0x810 [ 2517.990303] ? kasan_check_read+0x11/0x20 [ 2517.994447] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2517.998844] ? check_noncircular+0x20/0x20 [ 2518.003068] ? __lock_acquire+0x7f5/0x5140 [ 2518.007290] ? _raw_spin_unlock_irq+0x27/0x70 [ 2518.011777] ? graph_lock+0x170/0x170 [ 2518.015571] ? find_held_lock+0x36/0x1c0 [ 2518.019620] ? lock_downgrade+0x8e0/0x8e0 [ 2518.023771] ? kasan_check_read+0x11/0x20 [ 2518.027910] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2518.032301] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2518.036872] ? kasan_check_write+0x14/0x20 [ 2518.041100] ? do_raw_spin_lock+0xc1/0x200 [ 2518.045324] __handle_mm_fault+0x38d8/0x4310 [ 2518.049722] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2518.054462] ? graph_lock+0x170/0x170 [ 2518.058249] ? find_held_lock+0x36/0x1c0 [ 2518.062319] ? lock_downgrade+0x8e0/0x8e0 [ 2518.066470] ? handle_mm_fault+0x8c0/0xc70 [ 2518.070693] handle_mm_fault+0x53a/0xc70 [ 2518.074744] ? __handle_mm_fault+0x4310/0x4310 [ 2518.079314] ? find_vma+0x34/0x190 [ 2518.083429] __do_page_fault+0x60b/0xe40 [ 2518.087476] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2518.092655] ? mm_fault_error+0x380/0x380 [ 2518.096788] ? graph_lock+0x170/0x170 [ 2518.100579] do_page_fault+0xee/0x8a7 [ 2518.104363] ? vmalloc_sync_all+0x30/0x30 [ 2518.108497] ? find_held_lock+0x36/0x1c0 [ 2518.112549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2518.117378] page_fault+0x1e/0x30 [ 2518.120822] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2518.126421] RSP: 0018:ffff8801961878a8 EFLAGS: 00010203 [ 2518.131789] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2518.139047] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880196187978 [ 2518.146301] RBP: ffff8801961878e0 R08: ffffed0032c30f32 R09: ffffed0032c30f2f [ 2518.153578] R10: ffffed0032c30f31 R11: 0000000000000003 R12: 0000000020013014 [ 2518.160833] R13: 0000000020013000 R14: ffff880196187978 R15: 00007ffffffff000 [ 2518.168115] ? _copy_from_user+0x10d/0x150 [ 2518.172349] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2518.177190] ? exit_robust_list+0x290/0x290 [ 2518.181508] ? is_bpf_text_address+0xd7/0x170 [ 2518.185996] ? snd_timer_user_open+0x180/0x180 [ 2518.190579] ? find_held_lock+0x36/0x1c0 [ 2518.194638] ? lock_downgrade+0x8e0/0x8e0 [ 2518.198776] ? kasan_check_read+0x11/0x20 [ 2518.202910] ? rcu_is_watching+0x85/0x140 [ 2518.207049] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2518.212242] ? __fget+0x40c/0x650 [ 2518.215685] ? expand_files.part.8+0x9a0/0x9a0 [ 2518.220261] ? trace_hardirqs_off+0xd/0x10 [ 2518.224483] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2518.229580] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2518.234680] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2518.239686] ? fget_raw+0x20/0x20 [ 2518.243130] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2518.248049] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2518.253753] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2518.258763] __ia32_compat_sys_ioctl+0x221/0x640 [ 2518.263512] do_fast_syscall_32+0x345/0xf9b [ 2518.267817] ? do_int80_syscall_32+0x880/0x880 [ 2518.272392] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2518.277237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.282770] ? syscall_return_slowpath+0x30f/0x5c0 [ 2518.287696] ? sysret32_from_system_call+0x5/0x46 [ 2518.292526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2518.297355] entry_SYSENTER_compat+0x70/0x7f [ 2518.301754] RIP: 0023:0xf7fd4cb9 2018/05/08 18:56:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:03 executing program 7: 2018/05/08 18:56:03 executing program 5: 2018/05/08 18:56:03 executing program 2: syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:03 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) dup3(r1, r0, 0x0) 2018/05/08 18:56:03 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) [ 2518.305097] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2518.312788] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2518.320053] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2518.327315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2518.334578] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2518.341832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:03 executing program 7: request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000000380)='\x00', 0xfffffffffffffffb) 2018/05/08 18:56:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="74086e750000000000000000cdb700", 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup(r1, &(0x7f0000000600)='syz1\x00', 0x1ff) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000640)=0x1e) r2 = getuid() ioprio_set$uid(0x0, r2, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000700)={0x8, &(0x7f00000006c0)=[{0x44, 0xba78, 0x1f, 0x10000}, {0x0, 0x800, 0x1b, 0x3}, {0x8, 0x8, 0x8, 0x8}, {0x8, 0x1, 0x9, 0x20}, {0x7fff, 0x1, 0x7, 0x80000001}, {0x7, 0xf6, 0x6, 0xfff}, {0xfffffffffffffffb, 0xe31, 0xa037, 0x1}, {0x9, 0x7ff8000, 0x80000001, 0x4}]}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000003c0)={0x5, 0x9, 0x1}) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000680)='./file0\x00') getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}, 0x53}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f00000002c0)=0x4, 0x4) [ 2519.247475] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2519.252054] CPU: 1 PID: 8585 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2519.259228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.268569] Call Trace: [ 2519.271154] dump_stack+0x1b9/0x294 [ 2519.274772] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2519.279960] ? kasan_check_write+0x14/0x20 [ 2519.284187] ? do_raw_spin_lock+0xc1/0x200 [ 2519.288443] handle_userfault.cold.32+0x44/0x5a [ 2519.293111] ? handle_userfault+0x16c6/0x2760 [ 2519.297609] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2519.302193] ? debug_check_no_locks_freed+0x310/0x310 [ 2519.307374] ? find_held_lock+0x36/0x1c0 [ 2519.311433] ? print_usage_bug+0xc0/0xc0 [ 2519.315484] ? print_usage_bug+0xc0/0xc0 [ 2519.319530] ? lock_downgrade+0x8e0/0x8e0 [ 2519.323668] ? finish_task_switch+0x182/0x810 [ 2519.328166] ? kasan_check_read+0x11/0x20 [ 2519.332303] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2519.336696] ? check_noncircular+0x20/0x20 [ 2519.340934] ? __lock_acquire+0x7f5/0x5140 [ 2519.345594] ? _raw_spin_unlock_irq+0x27/0x70 [ 2519.350076] ? graph_lock+0x170/0x170 [ 2519.353869] ? find_held_lock+0x36/0x1c0 [ 2519.357921] ? lock_downgrade+0x8e0/0x8e0 [ 2519.362068] ? kasan_check_read+0x11/0x20 [ 2519.366217] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2519.370620] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2519.375194] ? kasan_check_write+0x14/0x20 [ 2519.379420] ? do_raw_spin_lock+0xc1/0x200 [ 2519.383648] __handle_mm_fault+0x38d8/0x4310 [ 2519.388055] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2519.392799] ? graph_lock+0x170/0x170 [ 2519.396587] ? find_held_lock+0x36/0x1c0 [ 2519.400637] ? lock_downgrade+0x8e0/0x8e0 [ 2519.404775] ? handle_mm_fault+0x8c0/0xc70 [ 2519.408993] handle_mm_fault+0x53a/0xc70 [ 2519.413050] ? __handle_mm_fault+0x4310/0x4310 [ 2519.417618] ? find_vma+0x34/0x190 [ 2519.421143] __do_page_fault+0x60b/0xe40 [ 2519.425188] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2519.430377] ? mm_fault_error+0x380/0x380 [ 2519.434518] ? graph_lock+0x170/0x170 [ 2519.438303] do_page_fault+0xee/0x8a7 [ 2519.442090] ? vmalloc_sync_all+0x30/0x30 [ 2519.446223] ? find_held_lock+0x36/0x1c0 [ 2519.450274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2519.455107] page_fault+0x1e/0x30 [ 2519.458548] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2519.464161] RSP: 0018:ffff88019cec78a8 EFLAGS: 00010203 [ 2519.469524] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2519.476780] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019cec7978 [ 2519.484044] RBP: ffff88019cec78e0 R08: ffffed00339d8f32 R09: ffffed00339d8f2f [ 2519.491299] R10: ffffed00339d8f31 R11: 0000000000000003 R12: 0000000020013014 [ 2519.498553] R13: 0000000020013000 R14: ffff88019cec7978 R15: 00007ffffffff000 [ 2519.505836] ? _copy_from_user+0x10d/0x150 [ 2519.510067] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2519.514911] ? exit_robust_list+0x290/0x290 [ 2519.519218] ? is_bpf_text_address+0xd7/0x170 [ 2519.523698] ? snd_timer_user_open+0x180/0x180 [ 2519.528264] ? find_held_lock+0x36/0x1c0 [ 2519.532311] ? lock_downgrade+0x8e0/0x8e0 [ 2519.536445] ? kasan_check_read+0x11/0x20 [ 2519.540584] ? rcu_is_watching+0x85/0x140 [ 2519.544725] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2519.549905] ? __fget+0x40c/0x650 [ 2519.553345] ? expand_files.part.8+0x9a0/0x9a0 [ 2519.557917] ? trace_hardirqs_off+0xd/0x10 [ 2519.562154] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2519.567250] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2519.572345] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2519.577357] ? fget_raw+0x20/0x20 [ 2519.580808] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2519.585732] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2519.591440] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2519.596444] __ia32_compat_sys_ioctl+0x221/0x640 [ 2519.601192] do_fast_syscall_32+0x345/0xf9b [ 2519.605502] ? do_int80_syscall_32+0x880/0x880 [ 2519.610070] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2519.614900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2519.620421] ? syscall_return_slowpath+0x30f/0x5c0 [ 2519.625350] ? sysret32_from_system_call+0x5/0x46 [ 2519.630181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2519.635014] entry_SYSENTER_compat+0x70/0x7f [ 2519.639418] RIP: 0023:0xf7fd4cb9 2018/05/08 18:56:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:04 executing program 0: setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:04 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) dup3(r1, r0, 0x0) 2018/05/08 18:56:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:04 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)) 2018/05/08 18:56:04 executing program 2: syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:04 executing program 5: 2018/05/08 18:56:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0xd1, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000500)}], 0x1, &(0x7f0000000000), 0x2d3}}], 0x2, 0x0) [ 2519.642764] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2519.650462] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2519.657725] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2519.664976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2519.672235] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2519.679494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:04 executing program 5: 2018/05/08 18:56:04 executing program 4: 2018/05/08 18:56:04 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:05 executing program 7: 2018/05/08 18:56:05 executing program 0: setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) [ 2520.585062] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2520.589630] CPU: 1 PID: 8626 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2520.596807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.606160] Call Trace: [ 2520.608754] dump_stack+0x1b9/0x294 [ 2520.612380] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2520.617569] handle_userfault.cold.32+0x44/0x5a [ 2520.622247] ? handle_userfault+0x16c6/0x2760 [ 2520.626737] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2520.631319] ? debug_check_no_locks_freed+0x310/0x310 [ 2520.636494] ? find_held_lock+0x36/0x1c0 [ 2520.640543] ? print_usage_bug+0xc0/0xc0 [ 2520.644588] ? print_usage_bug+0xc0/0xc0 [ 2520.648644] ? lock_downgrade+0x8e0/0x8e0 [ 2520.652797] ? finish_task_switch+0x182/0x810 [ 2520.657295] ? kasan_check_read+0x11/0x20 [ 2520.661442] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2520.665838] ? check_noncircular+0x20/0x20 [ 2520.670095] ? __lock_acquire+0x7f5/0x5140 [ 2520.674319] ? _raw_spin_unlock_irq+0x27/0x70 [ 2520.678816] ? graph_lock+0x170/0x170 [ 2520.682616] ? find_held_lock+0x36/0x1c0 [ 2520.686674] ? lock_downgrade+0x8e0/0x8e0 [ 2520.690815] ? kasan_check_read+0x11/0x20 [ 2520.694951] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2520.699349] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2520.703932] ? kasan_check_write+0x14/0x20 [ 2520.708172] ? do_raw_spin_lock+0xc1/0x200 [ 2520.712403] __handle_mm_fault+0x38d8/0x4310 [ 2520.716806] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2520.721555] ? graph_lock+0x170/0x170 [ 2520.725356] ? find_held_lock+0x36/0x1c0 [ 2520.729417] ? lock_downgrade+0x8e0/0x8e0 [ 2520.733573] ? handle_mm_fault+0x8c0/0xc70 [ 2520.737799] handle_mm_fault+0x53a/0xc70 [ 2520.741850] ? __handle_mm_fault+0x4310/0x4310 [ 2520.746431] ? find_vma+0x34/0x190 [ 2520.749967] __do_page_fault+0x60b/0xe40 [ 2520.754049] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2520.759252] ? mm_fault_error+0x380/0x380 [ 2520.763392] ? graph_lock+0x170/0x170 [ 2520.767191] do_page_fault+0xee/0x8a7 [ 2520.770990] ? vmalloc_sync_all+0x30/0x30 [ 2520.775148] ? find_held_lock+0x36/0x1c0 [ 2520.779223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2520.784067] page_fault+0x1e/0x30 [ 2520.787511] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2520.793114] RSP: 0018:ffff88019bc2f8a8 EFLAGS: 00010203 [ 2520.798462] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2520.805720] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019bc2f978 [ 2520.812993] RBP: ffff88019bc2f8e0 R08: ffffed0033785f32 R09: ffffed0033785f2f [ 2520.820250] R10: ffffed0033785f31 R11: 0000000000000003 R12: 0000000020013014 [ 2520.827510] R13: 0000000020013000 R14: ffff88019bc2f978 R15: 00007ffffffff000 [ 2520.834798] ? _copy_from_user+0x10d/0x150 [ 2520.839036] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2520.843875] ? exit_robust_list+0x290/0x290 [ 2520.848190] ? is_bpf_text_address+0xd7/0x170 [ 2520.852682] ? snd_timer_user_open+0x180/0x180 [ 2520.857248] ? find_held_lock+0x36/0x1c0 [ 2520.861311] ? lock_downgrade+0x8e0/0x8e0 [ 2520.865454] ? kasan_check_read+0x11/0x20 [ 2520.869587] ? rcu_is_watching+0x85/0x140 [ 2520.873722] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2520.878902] ? __fget+0x40c/0x650 [ 2520.882343] ? expand_files.part.8+0x9a0/0x9a0 [ 2520.886911] ? trace_hardirqs_off+0xd/0x10 [ 2520.891128] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2520.896224] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2520.901312] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2520.906317] ? fget_raw+0x20/0x20 [ 2520.909763] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2520.914680] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2520.920386] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2520.925390] __ia32_compat_sys_ioctl+0x221/0x640 [ 2520.930144] do_fast_syscall_32+0x345/0xf9b [ 2520.934462] ? do_int80_syscall_32+0x880/0x880 [ 2520.939034] ? _raw_spin_unlock_irq+0x27/0x70 [ 2520.943520] ? finish_task_switch+0x1ca/0x810 [ 2520.948000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.953538] ? syscall_return_slowpath+0x30f/0x5c0 [ 2520.958454] ? sysret32_from_system_call+0x5/0x46 [ 2520.963284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2520.968113] entry_SYSENTER_compat+0x70/0x7f [ 2520.972502] RIP: 0023:0xf7fd4cb9 [ 2520.975846] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/08 18:56:06 executing program 7: 2018/05/08 18:56:06 executing program 5: 2018/05/08 18:56:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:06 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:06 executing program 4: 2018/05/08 18:56:06 executing program 0: setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:06 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) dup3(r1, r0, 0x0) [ 2520.983537] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2520.990790] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2520.998060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2521.005313] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2521.012575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:06 executing program 4: 2018/05/08 18:56:06 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9), 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:06 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000140)) 2018/05/08 18:56:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:06 executing program 5: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x80ffffff, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/05/08 18:56:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:06 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001740)=0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/104, 0x68, 0x3) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r2, 0x0) preadv(r1, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/75, 0x4b}], 0x9, 0x0) 2018/05/08 18:56:06 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9), 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) [ 2521.910696] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2521.915309] CPU: 1 PID: 8660 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2521.922525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.931877] Call Trace: [ 2521.934464] dump_stack+0x1b9/0x294 [ 2521.938091] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2521.943278] ? do_raw_spin_lock+0x1a7/0x200 [ 2521.947601] handle_userfault.cold.32+0x44/0x5a [ 2521.952282] ? handle_userfault+0x16c6/0x2760 [ 2521.956774] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2521.961353] ? debug_check_no_locks_freed+0x310/0x310 [ 2521.966530] ? find_held_lock+0x36/0x1c0 [ 2521.970584] ? print_usage_bug+0xc0/0xc0 [ 2521.974636] ? print_usage_bug+0xc0/0xc0 [ 2521.978686] ? lock_downgrade+0x8e0/0x8e0 [ 2521.982831] ? finish_task_switch+0x182/0x810 [ 2521.987442] ? kasan_check_read+0x11/0x20 [ 2521.991591] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2521.995994] ? check_noncircular+0x20/0x20 [ 2522.000233] ? __lock_acquire+0x7f5/0x5140 [ 2522.004455] ? _raw_spin_unlock_irq+0x27/0x70 [ 2522.008948] ? graph_lock+0x170/0x170 [ 2522.012744] ? find_held_lock+0x36/0x1c0 [ 2522.016801] ? lock_downgrade+0x8e0/0x8e0 [ 2522.020960] ? kasan_check_read+0x11/0x20 [ 2522.025100] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2522.029496] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2522.034082] ? kasan_check_write+0x14/0x20 [ 2522.038312] ? do_raw_spin_lock+0xc1/0x200 [ 2522.042543] __handle_mm_fault+0x38d8/0x4310 [ 2522.046940] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2522.051682] ? graph_lock+0x170/0x170 [ 2522.055468] ? find_held_lock+0x36/0x1c0 [ 2522.059515] ? lock_downgrade+0x8e0/0x8e0 [ 2522.063659] ? handle_mm_fault+0x8c0/0xc70 [ 2522.067879] handle_mm_fault+0x53a/0xc70 [ 2522.071926] ? __handle_mm_fault+0x4310/0x4310 [ 2522.076492] ? find_vma+0x34/0x190 [ 2522.080028] __do_page_fault+0x60b/0xe40 [ 2522.084102] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2522.089313] ? mm_fault_error+0x380/0x380 [ 2522.093454] ? graph_lock+0x170/0x170 [ 2522.097245] do_page_fault+0xee/0x8a7 [ 2522.101055] ? vmalloc_sync_all+0x30/0x30 [ 2522.105210] ? find_held_lock+0x36/0x1c0 [ 2522.109281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2522.114119] page_fault+0x1e/0x30 [ 2522.117563] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2522.123167] RSP: 0018:ffff88019e61f8a8 EFLAGS: 00010203 [ 2522.128515] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2522.135777] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019e61f978 [ 2522.143050] RBP: ffff88019e61f8e0 R08: ffffed0033cc3f32 R09: ffffed0033cc3f2f [ 2522.150312] R10: ffffed0033cc3f31 R11: 0000000000000003 R12: 0000000020013014 [ 2522.157574] R13: 0000000020013000 R14: ffff88019e61f978 R15: 00007ffffffff000 [ 2522.164851] ? _copy_from_user+0x10d/0x150 [ 2522.169081] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2522.173914] ? exit_robust_list+0x290/0x290 [ 2522.178217] ? is_bpf_text_address+0xd7/0x170 [ 2522.182708] ? snd_timer_user_open+0x180/0x180 [ 2522.187279] ? find_held_lock+0x36/0x1c0 [ 2522.191332] ? lock_downgrade+0x8e0/0x8e0 [ 2522.195485] ? kasan_check_read+0x11/0x20 [ 2522.199627] ? rcu_is_watching+0x85/0x140 [ 2522.203763] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2522.208955] ? __fget+0x40c/0x650 [ 2522.212398] ? expand_files.part.8+0x9a0/0x9a0 [ 2522.216973] ? trace_hardirqs_off+0xd/0x10 [ 2522.221192] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2522.226288] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2522.231378] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2522.236392] ? fget_raw+0x20/0x20 [ 2522.239838] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2522.244764] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2522.250462] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2522.255473] __ia32_compat_sys_ioctl+0x221/0x640 [ 2522.260217] do_fast_syscall_32+0x345/0xf9b [ 2522.264526] ? do_int80_syscall_32+0x880/0x880 [ 2522.269097] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2522.273931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2522.279455] ? syscall_return_slowpath+0x30f/0x5c0 [ 2522.284374] ? sysret32_from_system_call+0x5/0x46 [ 2522.289204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2522.294034] entry_SYSENTER_compat+0x70/0x7f [ 2522.298426] RIP: 0023:0xf7fd4cb9 [ 2522.301780] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/08 18:56:07 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000d1f000)=0x9) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fe0000)=0x3) 2018/05/08 18:56:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:07 executing program 5: r0 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='syz1'], 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/05/08 18:56:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9), 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:07 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:07 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 2522.309474] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2522.316727] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2522.323986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2522.331238] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2522.338492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d", 0x13) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008805, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/255, 0xff}], 0x1, &(0x7f0000002fc0)=""/205, 0xcd}, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000900)=0xffdffffffffffffd, 0x4) sendto$inet(r0, &(0x7f0000000040)="11", 0x1, 0x40085, 0x0, 0x0) 2018/05/08 18:56:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:07 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) memfd_create(&(0x7f0000000040)='&)\\loem0:cpuset*\x00', 0x3) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000080)={0x0, 0x20}) rt_sigtimedwait(&(0x7f00009a4000), &(0x7f00005d8000), &(0x7f0000645000), 0x8) 2018/05/08 18:56:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d", 0x13) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) 2018/05/08 18:56:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) memfd_create(&(0x7f0000000040)='&)\\loem0:cpuset*\x00', 0x3) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000080)={0x0, 0x20}) rt_sigtimedwait(&(0x7f00009a4000), &(0x7f00005d8000), &(0x7f0000645000), 0x8) 2018/05/08 18:56:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:08 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:08 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d", 0x13) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000380)) 2018/05/08 18:56:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) 2018/05/08 18:56:09 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:09 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a", 0x1d) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:09 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') 2018/05/08 18:56:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:09 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) 2018/05/08 18:56:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a", 0x1d) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:09 executing program 0: perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000400, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a", 0x1d) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:09 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)) [ 2524.706955] rpcbind: RPC call returned error 22 2018/05/08 18:56:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:09 executing program 7: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:09 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 2524.733589] rpcbind: RPC call returned error 22 2018/05/08 18:56:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7", 0x22) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:10 executing program 0: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) 2018/05/08 18:56:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000100), 0x242, 0x200007fb, &(0x7f0000000240)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) shutdown(r0, 0x1) 2018/05/08 18:56:10 executing program 7: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8100, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/05/08 18:56:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:10 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:10 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc403, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7", 0x22) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:10 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x4000, 0x0) 2018/05/08 18:56:10 executing program 7: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/05/08 18:56:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:10 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) 2018/05/08 18:56:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7", 0x22) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:10 executing program 7: mkdir(&(0x7f0000bdb000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000aef000), 0xffffffff) 2018/05/08 18:56:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1203, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c70335", 0x24) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) [ 2526.223599] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2526.228181] CPU: 0 PID: 8826 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2526.235353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2526.244688] Call Trace: [ 2526.247263] dump_stack+0x1b9/0x294 [ 2526.250890] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2526.256093] ? kasan_check_write+0x14/0x20 [ 2526.260325] ? do_raw_spin_lock+0xc1/0x200 [ 2526.264553] handle_userfault.cold.32+0x44/0x5a [ 2526.269209] ? handle_userfault+0x16c6/0x2760 [ 2526.273698] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2526.278268] ? debug_check_no_locks_freed+0x310/0x310 [ 2526.283443] ? find_held_lock+0x36/0x1c0 [ 2526.287491] ? print_usage_bug+0xc0/0xc0 [ 2526.291537] ? print_usage_bug+0xc0/0xc0 [ 2526.295584] ? lock_downgrade+0x8e0/0x8e0 [ 2526.299716] ? finish_task_switch+0x182/0x810 [ 2526.304196] ? perf_trace_lock+0xd6/0x900 [ 2526.308326] ? perf_trace_lock_acquire+0xe3/0x980 [ 2526.313158] ? __lock_acquire+0x7f5/0x5140 [ 2526.317379] ? _raw_spin_unlock_irq+0x27/0x70 [ 2526.321860] ? graph_lock+0x170/0x170 [ 2526.325653] ? find_held_lock+0x36/0x1c0 [ 2526.329710] ? lock_downgrade+0x8e0/0x8e0 [ 2526.333846] ? kasan_check_read+0x11/0x20 [ 2526.337981] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2526.342375] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2526.346951] ? kasan_check_write+0x14/0x20 [ 2526.351173] ? do_raw_spin_lock+0xc1/0x200 [ 2526.355398] __handle_mm_fault+0x38d8/0x4310 [ 2526.359792] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2526.364530] ? graph_lock+0x170/0x170 [ 2526.368316] ? find_held_lock+0x36/0x1c0 [ 2526.372368] ? lock_downgrade+0x8e0/0x8e0 [ 2526.376507] ? handle_mm_fault+0x8c0/0xc70 [ 2526.380730] handle_mm_fault+0x53a/0xc70 [ 2526.384777] ? __handle_mm_fault+0x4310/0x4310 [ 2526.389348] ? find_vma+0x34/0x190 [ 2526.392873] __do_page_fault+0x60b/0xe40 [ 2526.396920] ? mm_fault_error+0x380/0x380 [ 2526.401050] ? graph_lock+0x170/0x170 [ 2526.404831] ? zap_class+0x720/0x720 [ 2526.408531] do_page_fault+0xee/0x8a7 [ 2526.412315] ? vmalloc_sync_all+0x30/0x30 [ 2526.416447] ? find_held_lock+0x36/0x1c0 [ 2526.420501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2526.425336] page_fault+0x1e/0x30 [ 2526.428772] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2526.434376] RSP: 0018:ffff88019ee5f8a8 EFLAGS: 00010203 [ 2526.439724] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2526.446975] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019ee5f978 [ 2526.454225] RBP: ffff88019ee5f8e0 R08: ffffed0033dcbf32 R09: ffffed0033dcbf2f [ 2526.461477] R10: ffffed0033dcbf31 R11: 0000000000000003 R12: 0000000020013014 [ 2526.468729] R13: 0000000020013000 R14: ffff88019ee5f978 R15: 00007ffffffff000 [ 2526.475997] ? _copy_from_user+0x10d/0x150 [ 2526.480226] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2526.485055] ? exit_robust_list+0x290/0x290 [ 2526.489361] ? snd_timer_user_open+0x180/0x180 [ 2526.493938] ? find_held_lock+0x36/0x1c0 [ 2526.497993] ? lock_downgrade+0x8e0/0x8e0 [ 2526.502132] ? rcu_is_watching+0x85/0x140 [ 2526.506273] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2526.511454] ? __fget+0x40c/0x650 [ 2526.514904] ? expand_files.part.8+0x9a0/0x9a0 [ 2526.520689] ? trace_hardirqs_off+0xd/0x10 [ 2526.524911] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2526.530030] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2526.535122] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2526.540125] ? fget_raw+0x20/0x20 [ 2526.543571] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2526.548488] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2526.554185] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2526.559191] __ia32_compat_sys_ioctl+0x221/0x640 [ 2526.563938] do_fast_syscall_32+0x345/0xf9b [ 2526.568247] ? do_int80_syscall_32+0x880/0x880 [ 2526.572815] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2526.577651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2526.583174] ? syscall_return_slowpath+0x30f/0x5c0 [ 2526.588093] ? sysret32_from_system_call+0x5/0x46 [ 2526.592925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2526.597761] entry_SYSENTER_compat+0x70/0x7f [ 2526.602151] RIP: 0023:0xf7fd4cb9 [ 2526.605494] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2526.613188] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 2018/05/08 18:56:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x8, 0x4000000000081, 0x2}, 0x5bf) perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TTUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/30) close(r0) 2018/05/08 18:56:11 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) 2018/05/08 18:56:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) 2018/05/08 18:56:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c70335", 0x24) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:11 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:11 executing program 7: mkdir(&(0x7f0000bdb000)='./file0\x00', 0x0) mount(&(0x7f0000e07000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000054d000)) [ 2526.620442] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2526.627692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2526.634941] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2526.642191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2527.595005] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2527.599615] CPU: 0 PID: 8879 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2527.606787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.616124] Call Trace: [ 2527.618702] dump_stack+0x1b9/0x294 [ 2527.622315] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2527.627499] ? kasan_check_write+0x14/0x20 [ 2527.631725] ? do_raw_spin_lock+0xc1/0x200 [ 2527.636045] handle_userfault.cold.32+0x44/0x5a [ 2527.640702] ? handle_userfault+0x16c6/0x2760 [ 2527.645192] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2527.649763] ? debug_check_no_locks_freed+0x310/0x310 [ 2527.654948] ? find_held_lock+0x36/0x1c0 [ 2527.658998] ? print_usage_bug+0xc0/0xc0 [ 2527.663052] ? print_usage_bug+0xc0/0xc0 [ 2527.667098] ? lock_downgrade+0x8e0/0x8e0 [ 2527.671233] ? finish_task_switch+0x182/0x810 [ 2527.675713] ? perf_trace_lock+0xd6/0x900 [ 2527.679845] ? perf_trace_lock_acquire+0xe3/0x980 [ 2527.684683] ? __lock_acquire+0x7f5/0x5140 [ 2527.688903] ? _raw_spin_unlock_irq+0x27/0x70 [ 2527.693383] ? graph_lock+0x170/0x170 [ 2527.697175] ? find_held_lock+0x36/0x1c0 [ 2527.701226] ? lock_downgrade+0x8e0/0x8e0 [ 2527.705363] ? kasan_check_read+0x11/0x20 [ 2527.709492] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2527.713884] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2527.718455] ? kasan_check_write+0x14/0x20 [ 2527.722674] ? do_raw_spin_lock+0xc1/0x200 [ 2527.726899] __handle_mm_fault+0x38d8/0x4310 [ 2527.731297] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2527.736041] ? graph_lock+0x170/0x170 [ 2527.739829] ? find_held_lock+0x36/0x1c0 [ 2527.743879] ? lock_downgrade+0x8e0/0x8e0 [ 2527.748029] ? handle_mm_fault+0x8c0/0xc70 [ 2527.752256] handle_mm_fault+0x53a/0xc70 [ 2527.756316] ? __handle_mm_fault+0x4310/0x4310 [ 2527.760885] ? find_vma+0x34/0x190 [ 2527.764411] __do_page_fault+0x60b/0xe40 [ 2527.768462] ? mm_fault_error+0x380/0x380 [ 2527.772592] ? graph_lock+0x170/0x170 [ 2527.776376] ? zap_class+0x720/0x720 [ 2527.780073] do_page_fault+0xee/0x8a7 [ 2527.783857] ? vmalloc_sync_all+0x30/0x30 [ 2527.787990] ? find_held_lock+0x36/0x1c0 [ 2527.792049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2527.796877] page_fault+0x1e/0x30 [ 2527.800318] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2527.805918] RSP: 0018:ffff88019711f8a8 EFLAGS: 00010203 [ 2527.811262] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2527.818516] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019711f978 [ 2527.826215] RBP: ffff88019711f8e0 R08: ffffed0032e23f32 R09: ffffed0032e23f2f [ 2527.833469] R10: ffffed0032e23f31 R11: 0000000000000003 R12: 0000000020013014 [ 2527.840720] R13: 0000000020013000 R14: ffff88019711f978 R15: 00007ffffffff000 [ 2527.847996] ? _copy_from_user+0x10d/0x150 [ 2527.852230] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2527.857057] ? exit_robust_list+0x290/0x290 [ 2527.861361] ? snd_timer_user_open+0x180/0x180 [ 2527.865927] ? find_held_lock+0x36/0x1c0 [ 2527.869978] ? lock_downgrade+0x8e0/0x8e0 [ 2527.874115] ? rcu_is_watching+0x85/0x140 [ 2527.878248] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2527.883427] ? __fget+0x40c/0x650 [ 2527.886872] ? expand_files.part.8+0x9a0/0x9a0 [ 2527.891443] ? trace_hardirqs_off+0xd/0x10 [ 2527.895663] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2527.900756] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2527.905843] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2527.910844] ? fget_raw+0x20/0x20 [ 2527.914288] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2527.919207] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2527.924904] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2527.929906] __ia32_compat_sys_ioctl+0x221/0x640 [ 2527.934659] do_fast_syscall_32+0x345/0xf9b [ 2527.938967] ? do_int80_syscall_32+0x880/0x880 [ 2527.943532] ? _raw_spin_unlock_irq+0x27/0x70 [ 2527.948014] ? finish_task_switch+0x1ca/0x810 [ 2527.952502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2527.958031] ? syscall_return_slowpath+0x30f/0x5c0 [ 2527.962947] ? sysret32_from_system_call+0x5/0x46 [ 2527.967775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2527.972608] entry_SYSENTER_compat+0x70/0x7f [ 2527.976996] RIP: 0023:0xf7fd4cb9 [ 2527.980345] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2527.988035] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 2018/05/08 18:56:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c70335", 0x24) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:13 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:13 executing program 5: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') fchown(r0, 0x0, 0x0) 2018/05/08 18:56:13 executing program 0: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="0000009d59000000140003006970365f767469300000000c00000000"], 0x2}, 0x1}, 0x0) 2018/05/08 18:56:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) 2018/05/08 18:56:13 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) [ 2527.995286] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2528.002539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2528.009788] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2528.017038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2528.167555] IPVS: ftp: loaded support on port[0] = 21 2018/05/08 18:56:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500", 0x25) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2528.249052] rpcbind: RPC call returned error 22 [ 2528.289170] rpcbind: RPC call returned error 22 2018/05/08 18:56:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500", 0x25) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:13 executing program 5: r0 = socket$kcm(0xa, 0x200000005, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f000000000000008400000008000000"], 0x10}, 0x0) 2018/05/08 18:56:13 executing program 7: r0 = gettid() kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 2018/05/08 18:56:13 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:13 executing program 2: r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3) 2018/05/08 18:56:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500", 0x25) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:13 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000740)={{0x3, 0x0, 0x0, 0x0, "b333bed523af39e3bcc65d296abc7a4a7d690b1b4c5e7cb52931e695fd636b247a7ae4b9a57ea78b2bfb1ae7"}}) 2018/05/08 18:56:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:13 executing program 0: [ 2529.001561] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2529.006198] CPU: 0 PID: 8903 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2529.013385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2529.022732] Call Trace: [ 2529.025327] dump_stack+0x1b9/0x294 [ 2529.028955] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2529.034143] ? kasan_check_write+0x14/0x20 [ 2529.038374] ? do_raw_spin_lock+0xc1/0x200 [ 2529.042616] handle_userfault.cold.32+0x44/0x5a [ 2529.047282] ? handle_userfault+0x16c6/0x2760 [ 2529.051783] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2529.056366] ? debug_check_no_locks_freed+0x310/0x310 [ 2529.061551] ? find_held_lock+0x36/0x1c0 [ 2529.065612] ? print_usage_bug+0xc0/0xc0 [ 2529.069669] ? print_usage_bug+0xc0/0xc0 [ 2529.073727] ? lock_downgrade+0x8e0/0x8e0 [ 2529.077869] ? finish_task_switch+0x182/0x810 [ 2529.082361] ? perf_trace_lock+0xd6/0x900 [ 2529.086516] ? perf_trace_lock_acquire+0xe3/0x980 [ 2529.091367] ? __lock_acquire+0x7f5/0x5140 [ 2529.095598] ? _raw_spin_unlock_irq+0x27/0x70 [ 2529.100092] ? graph_lock+0x170/0x170 [ 2529.103900] ? find_held_lock+0x36/0x1c0 [ 2529.107966] ? lock_downgrade+0x8e0/0x8e0 [ 2529.112121] ? kasan_check_read+0x11/0x20 [ 2529.116267] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2529.120673] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2529.125255] ? kasan_check_write+0x14/0x20 [ 2529.129486] ? do_raw_spin_lock+0xc1/0x200 [ 2529.133723] __handle_mm_fault+0x38d8/0x4310 [ 2529.138136] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2529.142887] ? graph_lock+0x170/0x170 [ 2529.146686] ? find_held_lock+0x36/0x1c0 [ 2529.150755] ? lock_downgrade+0x8e0/0x8e0 [ 2529.154910] ? handle_mm_fault+0x8c0/0xc70 [ 2529.159144] handle_mm_fault+0x53a/0xc70 [ 2529.163204] ? __handle_mm_fault+0x4310/0x4310 [ 2529.167787] ? find_vma+0x34/0x190 [ 2529.171328] __do_page_fault+0x60b/0xe40 [ 2529.175392] ? mm_fault_error+0x380/0x380 [ 2529.179541] ? graph_lock+0x170/0x170 [ 2529.183337] ? zap_class+0x720/0x720 [ 2529.187049] do_page_fault+0xee/0x8a7 [ 2529.190847] ? vmalloc_sync_all+0x30/0x30 [ 2529.194994] ? find_held_lock+0x36/0x1c0 [ 2529.199063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2529.203906] page_fault+0x1e/0x30 [ 2529.207358] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2529.212970] RSP: 0018:ffff880199d2f8a8 EFLAGS: 00010203 [ 2529.218333] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2529.225599] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880199d2f978 [ 2529.232864] RBP: ffff880199d2f8e0 R08: ffffed00333a5f32 R09: ffffed00333a5f2f [ 2529.240131] R10: ffffed00333a5f31 R11: 0000000000000003 R12: 0000000020013014 [ 2529.247392] R13: 0000000020013000 R14: ffff880199d2f978 R15: 00007ffffffff000 [ 2529.254689] ? _copy_from_user+0x10d/0x150 [ 2529.258926] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2529.263765] ? exit_robust_list+0x290/0x290 [ 2529.268091] ? snd_timer_user_open+0x180/0x180 [ 2529.272673] ? find_held_lock+0x36/0x1c0 [ 2529.276740] ? lock_downgrade+0x8e0/0x8e0 [ 2529.280889] ? rcu_is_watching+0x85/0x140 [ 2529.285036] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2529.290232] ? __fget+0x40c/0x650 [ 2529.293688] ? expand_files.part.8+0x9a0/0x9a0 [ 2529.298265] ? trace_hardirqs_off+0xd/0x10 [ 2529.302496] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2529.307607] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2529.312712] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2529.317724] ? fget_raw+0x20/0x20 [ 2529.321187] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2529.326118] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2529.331827] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2529.336846] __ia32_compat_sys_ioctl+0x221/0x640 [ 2529.341608] do_fast_syscall_32+0x345/0xf9b [ 2529.345928] ? do_int80_syscall_32+0x880/0x880 [ 2529.350510] ? kasan_check_write+0x14/0x20 [ 2529.354747] ? syscall_return_slowpath+0x30f/0x5c0 [ 2529.359677] ? sysret32_from_system_call+0x5/0x46 [ 2529.364526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2529.369377] entry_SYSENTER_compat+0x70/0x7f [ 2529.373785] RIP: 0023:0xf7fd4cb9 [ 2529.377144] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2529.384848] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2529.392108] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 2018/05/08 18:56:14 executing program 5: 2018/05/08 18:56:14 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:14 executing program 7: 2018/05/08 18:56:14 executing program 0: 2018/05/08 18:56:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:14 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:14 executing program 2: [ 2529.399369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2529.406644] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2529.413903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:14 executing program 7: 2018/05/08 18:56:14 executing program 2: 2018/05/08 18:56:14 executing program 0: 2018/05/08 18:56:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:14 executing program 5: 2018/05/08 18:56:14 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:14 executing program 7: 2018/05/08 18:56:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:14 executing program 4: prctl$seccomp(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:14 executing program 2: 2018/05/08 18:56:14 executing program 0: 2018/05/08 18:56:14 executing program 7: 2018/05/08 18:56:14 executing program 5: 2018/05/08 18:56:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:15 executing program 0: 2018/05/08 18:56:15 executing program 2: 2018/05/08 18:56:15 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:15 executing program 5: 2018/05/08 18:56:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:15 executing program 7: 2018/05/08 18:56:15 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:15 executing program 0: 2018/05/08 18:56:15 executing program 5: 2018/05/08 18:56:15 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:15 executing program 2: 2018/05/08 18:56:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:15 executing program 7: 2018/05/08 18:56:15 executing program 5: 2018/05/08 18:56:15 executing program 0: 2018/05/08 18:56:15 executing program 2: 2018/05/08 18:56:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:15 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:15 executing program 2: 2018/05/08 18:56:15 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:15 executing program 5: 2018/05/08 18:56:15 executing program 7: 2018/05/08 18:56:15 executing program 0: 2018/05/08 18:56:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:15 executing program 2: 2018/05/08 18:56:15 executing program 7: 2018/05/08 18:56:15 executing program 5: 2018/05/08 18:56:15 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:15 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:15 executing program 0: 2018/05/08 18:56:15 executing program 2: 2018/05/08 18:56:15 executing program 7: 2018/05/08 18:56:15 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) dup3(0xffffffffffffffff, r0, 0x0) 2018/05/08 18:56:15 executing program 5: [ 2531.442454] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2531.447050] CPU: 0 PID: 9036 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2531.454226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2531.463561] Call Trace: [ 2531.466139] dump_stack+0x1b9/0x294 [ 2531.469774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2531.474955] ? kasan_check_write+0x14/0x20 [ 2531.479176] ? do_raw_spin_lock+0xc1/0x200 [ 2531.483401] handle_userfault.cold.32+0x44/0x5a [ 2531.488055] ? handle_userfault+0x16c6/0x2760 [ 2531.492543] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2531.497112] ? debug_check_no_locks_freed+0x310/0x310 [ 2531.502286] ? find_held_lock+0x36/0x1c0 [ 2531.506343] ? print_usage_bug+0xc0/0xc0 [ 2531.510405] ? print_usage_bug+0xc0/0xc0 [ 2531.514450] ? lock_downgrade+0x8e0/0x8e0 [ 2531.518583] ? finish_task_switch+0x182/0x810 [ 2531.523068] ? kasan_check_read+0x11/0x20 [ 2531.527218] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2531.531611] ? check_noncircular+0x20/0x20 [ 2531.535836] ? __lock_acquire+0x7f5/0x5140 [ 2531.540053] ? _raw_spin_unlock_irq+0x27/0x70 [ 2531.544532] ? graph_lock+0x170/0x170 [ 2531.548327] ? find_held_lock+0x36/0x1c0 [ 2531.552378] ? lock_downgrade+0x8e0/0x8e0 [ 2531.556514] ? kasan_check_read+0x11/0x20 [ 2531.560648] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2531.565040] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2531.569609] ? kasan_check_write+0x14/0x20 [ 2531.573826] ? do_raw_spin_lock+0xc1/0x200 [ 2531.578049] __handle_mm_fault+0x38d8/0x4310 [ 2531.582444] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2531.587183] ? graph_lock+0x170/0x170 [ 2531.590973] ? find_held_lock+0x36/0x1c0 [ 2531.595033] ? lock_downgrade+0x8e0/0x8e0 [ 2531.599176] ? handle_mm_fault+0x8c0/0xc70 [ 2531.603403] handle_mm_fault+0x53a/0xc70 [ 2531.607452] ? __handle_mm_fault+0x4310/0x4310 [ 2531.612027] ? find_vma+0x34/0x190 [ 2531.615553] __do_page_fault+0x60b/0xe40 [ 2531.619600] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2531.624791] ? mm_fault_error+0x380/0x380 [ 2531.628923] ? graph_lock+0x170/0x170 [ 2531.632707] do_page_fault+0xee/0x8a7 [ 2531.636493] ? vmalloc_sync_all+0x30/0x30 [ 2531.640626] ? find_held_lock+0x36/0x1c0 [ 2531.644678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2531.649507] page_fault+0x1e/0x30 [ 2531.652957] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2531.658560] RSP: 0018:ffff88019c92f8a8 EFLAGS: 00010203 [ 2531.663906] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2531.671155] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019c92f978 [ 2531.678406] RBP: ffff88019c92f8e0 R08: ffffed0033925f32 R09: ffffed0033925f2f [ 2531.685658] R10: ffffed0033925f31 R11: 0000000000000003 R12: 0000000020013014 [ 2531.692916] R13: 0000000020013000 R14: ffff88019c92f978 R15: 00007ffffffff000 [ 2531.700195] ? _copy_from_user+0x10d/0x150 [ 2531.704422] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2531.709247] ? exit_robust_list+0x290/0x290 [ 2531.713551] ? is_bpf_text_address+0xd7/0x170 [ 2531.718034] ? snd_timer_user_open+0x180/0x180 [ 2531.722602] ? find_held_lock+0x36/0x1c0 [ 2531.726654] ? lock_downgrade+0x8e0/0x8e0 [ 2531.730788] ? kasan_check_read+0x11/0x20 [ 2531.734921] ? rcu_is_watching+0x85/0x140 [ 2531.739052] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2531.744232] ? __fget+0x40c/0x650 [ 2531.747674] ? expand_files.part.8+0x9a0/0x9a0 [ 2531.752239] ? trace_hardirqs_off+0xd/0x10 [ 2531.756460] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2531.761554] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2531.766643] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2531.771644] ? fget_raw+0x20/0x20 [ 2531.775086] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2531.780006] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2531.785715] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2531.790717] __ia32_compat_sys_ioctl+0x221/0x640 [ 2531.795463] do_fast_syscall_32+0x345/0xf9b [ 2531.799772] ? do_int80_syscall_32+0x880/0x880 [ 2531.804338] ? _raw_spin_unlock_irq+0x27/0x70 [ 2531.808819] ? finish_task_switch+0x1ca/0x810 [ 2531.813303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2531.818826] ? syscall_return_slowpath+0x30f/0x5c0 [ 2531.824361] ? sysret32_from_system_call+0x5/0x46 [ 2531.829197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2531.834033] entry_SYSENTER_compat+0x70/0x7f [ 2531.838425] RIP: 0023:0xf7fd4cb9 [ 2531.841772] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2531.849464] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000c0145401 [ 2531.856717] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2531.863970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2531.871221] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2531.878471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:17 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:17 executing program 0: 2018/05/08 18:56:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:17 executing program 2: 2018/05/08 18:56:17 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) dup3(0xffffffffffffffff, r0, 0x0) 2018/05/08 18:56:17 executing program 5: 2018/05/08 18:56:17 executing program 7: 2018/05/08 18:56:17 executing program 7: 2018/05/08 18:56:17 executing program 0: 2018/05/08 18:56:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:17 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:17 executing program 5: 2018/05/08 18:56:17 executing program 2: 2018/05/08 18:56:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2532.860742] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2532.865355] CPU: 0 PID: 9052 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2532.872541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2532.881890] Call Trace: [ 2532.884475] dump_stack+0x1b9/0x294 [ 2532.888106] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2532.893290] ? kasan_check_write+0x14/0x20 [ 2532.897517] ? do_raw_spin_lock+0xc1/0x200 [ 2532.901749] handle_userfault.cold.32+0x44/0x5a [ 2532.906409] ? handle_userfault+0x16c6/0x2760 [ 2532.910899] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2532.915467] ? debug_check_no_locks_freed+0x310/0x310 [ 2532.920641] ? find_held_lock+0x36/0x1c0 [ 2532.924694] ? print_usage_bug+0xc0/0xc0 [ 2532.928743] ? print_usage_bug+0xc0/0xc0 [ 2532.932817] ? lock_downgrade+0x8e0/0x8e0 [ 2532.936951] ? finish_task_switch+0x182/0x810 [ 2532.941437] ? kasan_check_read+0x11/0x20 [ 2532.945575] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2532.949968] ? check_noncircular+0x20/0x20 [ 2532.954205] ? __lock_acquire+0x7f5/0x5140 [ 2532.958428] ? _raw_spin_unlock_irq+0x27/0x70 [ 2532.962907] ? graph_lock+0x170/0x170 [ 2532.966705] ? find_held_lock+0x36/0x1c0 [ 2532.970756] ? lock_downgrade+0x8e0/0x8e0 [ 2532.974897] ? kasan_check_read+0x11/0x20 [ 2532.979034] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2532.983429] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2532.988000] ? kasan_check_write+0x14/0x20 [ 2532.992226] ? do_raw_spin_lock+0xc1/0x200 [ 2532.996467] __handle_mm_fault+0x38d8/0x4310 [ 2533.000869] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2533.005611] ? graph_lock+0x170/0x170 [ 2533.009402] ? find_held_lock+0x36/0x1c0 [ 2533.013455] ? lock_downgrade+0x8e0/0x8e0 [ 2533.017599] ? handle_mm_fault+0x8c0/0xc70 [ 2533.021827] handle_mm_fault+0x53a/0xc70 [ 2533.025880] ? __handle_mm_fault+0x4310/0x4310 [ 2533.030452] ? find_vma+0x34/0x190 [ 2533.033980] __do_page_fault+0x60b/0xe40 [ 2533.038034] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2533.043217] ? mm_fault_error+0x380/0x380 [ 2533.047351] ? graph_lock+0x170/0x170 [ 2533.051141] do_page_fault+0xee/0x8a7 [ 2533.054934] ? vmalloc_sync_all+0x30/0x30 [ 2533.059071] ? find_held_lock+0x36/0x1c0 [ 2533.063125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2533.067961] page_fault+0x1e/0x30 [ 2533.071406] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2533.077014] RSP: 0018:ffff8801b11af8a8 EFLAGS: 00010203 [ 2533.082373] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2533.089638] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801b11af978 [ 2533.096895] RBP: ffff8801b11af8e0 R08: ffffed0036235f32 R09: ffffed0036235f2f [ 2533.104152] R10: ffffed0036235f31 R11: 0000000000000003 R12: 0000000020013014 [ 2533.111405] R13: 0000000020013000 R14: ffff8801b11af978 R15: 00007ffffffff000 [ 2533.118682] ? _copy_from_user+0x10d/0x150 [ 2533.122910] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2533.127743] ? exit_robust_list+0x290/0x290 [ 2533.132918] ? is_bpf_text_address+0xd7/0x170 [ 2533.137405] ? snd_timer_user_open+0x180/0x180 [ 2533.141975] ? find_held_lock+0x36/0x1c0 [ 2533.146037] ? lock_downgrade+0x8e0/0x8e0 [ 2533.150178] ? kasan_check_read+0x11/0x20 [ 2533.154309] ? rcu_is_watching+0x85/0x140 [ 2533.158443] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2533.163624] ? __fget+0x40c/0x650 [ 2533.167072] ? expand_files.part.8+0x9a0/0x9a0 [ 2533.171641] ? trace_hardirqs_off+0xd/0x10 [ 2533.175863] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2533.180961] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2533.186055] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2533.191065] ? fget_raw+0x20/0x20 [ 2533.194509] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2533.199427] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2533.205126] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2533.210132] __ia32_compat_sys_ioctl+0x221/0x640 [ 2533.214880] do_fast_syscall_32+0x345/0xf9b [ 2533.219193] ? do_int80_syscall_32+0x880/0x880 [ 2533.223766] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2533.228601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2533.234143] ? syscall_return_slowpath+0x30f/0x5c0 [ 2533.239068] ? sysret32_from_system_call+0x5/0x46 [ 2533.243902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2533.248734] entry_SYSENTER_compat+0x70/0x7f [ 2533.253124] RIP: 0023:0xf7fd4cb9 [ 2533.256470] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2533.264167] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000c0145401 [ 2533.271437] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2533.278696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2533.285958] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2533.293215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:18 executing program 7: 2018/05/08 18:56:18 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:18 executing program 5: 2018/05/08 18:56:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:18 executing program 2: 2018/05/08 18:56:18 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) dup3(0xffffffffffffffff, r0, 0x0) 2018/05/08 18:56:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:18 executing program 0: 2018/05/08 18:56:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:18 executing program 7: 2018/05/08 18:56:18 executing program 0: 2018/05/08 18:56:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:18 executing program 2: 2018/05/08 18:56:18 executing program 5: [ 2534.301630] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2534.306320] CPU: 1 PID: 9082 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2534.313509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2534.322886] Call Trace: [ 2534.325477] dump_stack+0x1b9/0x294 [ 2534.329096] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2534.334280] ? kasan_check_write+0x14/0x20 [ 2534.338524] ? do_raw_spin_lock+0xc1/0x200 [ 2534.342756] handle_userfault.cold.32+0x44/0x5a [ 2534.347415] ? handle_userfault+0x16c6/0x2760 [ 2534.351913] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2534.356489] ? debug_check_no_locks_freed+0x310/0x310 [ 2534.361665] ? find_held_lock+0x36/0x1c0 [ 2534.365713] ? print_usage_bug+0xc0/0xc0 [ 2534.369758] ? print_usage_bug+0xc0/0xc0 [ 2534.373814] ? lock_downgrade+0x8e0/0x8e0 [ 2534.377953] ? finish_task_switch+0x182/0x810 [ 2534.382441] ? kasan_check_read+0x11/0x20 [ 2534.386581] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2534.390977] ? check_noncircular+0x20/0x20 [ 2534.395205] ? __lock_acquire+0x7f5/0x5140 [ 2534.399437] ? _raw_spin_unlock_irq+0x27/0x70 [ 2534.403926] ? graph_lock+0x170/0x170 [ 2534.407727] ? find_held_lock+0x36/0x1c0 [ 2534.411781] ? lock_downgrade+0x8e0/0x8e0 [ 2534.415921] ? kasan_check_read+0x11/0x20 [ 2534.420056] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2534.424453] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2534.429030] ? kasan_check_write+0x14/0x20 [ 2534.433263] ? do_raw_spin_lock+0xc1/0x200 [ 2534.437488] __handle_mm_fault+0x38d8/0x4310 [ 2534.441889] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2534.446629] ? graph_lock+0x170/0x170 [ 2534.450426] ? find_held_lock+0x36/0x1c0 [ 2534.454483] ? lock_downgrade+0x8e0/0x8e0 [ 2534.458629] ? handle_mm_fault+0x8c0/0xc70 [ 2534.462854] handle_mm_fault+0x53a/0xc70 [ 2534.466907] ? __handle_mm_fault+0x4310/0x4310 [ 2534.471481] ? find_vma+0x34/0x190 [ 2534.475012] __do_page_fault+0x60b/0xe40 [ 2534.479067] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2534.484248] ? mm_fault_error+0x380/0x380 [ 2534.488382] ? graph_lock+0x170/0x170 [ 2534.492175] do_page_fault+0xee/0x8a7 [ 2534.495969] ? vmalloc_sync_all+0x30/0x30 [ 2534.500105] ? find_held_lock+0x36/0x1c0 [ 2534.504163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2534.508995] page_fault+0x1e/0x30 [ 2534.512455] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2534.518059] RSP: 0018:ffff8801999978a8 EFLAGS: 00010203 [ 2534.524281] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2534.531539] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880199997978 [ 2534.538795] RBP: ffff8801999978e0 R08: ffffed0033332f32 R09: ffffed0033332f2f [ 2534.546050] R10: ffffed0033332f31 R11: 0000000000000003 R12: 0000000020013014 [ 2534.553302] R13: 0000000020013000 R14: ffff880199997978 R15: 00007ffffffff000 [ 2534.560582] ? _copy_from_user+0x10d/0x150 [ 2534.564808] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2534.569642] ? exit_robust_list+0x290/0x290 [ 2534.573951] ? is_bpf_text_address+0xd7/0x170 [ 2534.578448] ? snd_timer_user_open+0x180/0x180 [ 2534.583028] ? find_held_lock+0x36/0x1c0 [ 2534.587084] ? lock_downgrade+0x8e0/0x8e0 [ 2534.591235] ? kasan_check_read+0x11/0x20 [ 2534.595372] ? rcu_is_watching+0x85/0x140 [ 2534.599515] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2534.604706] ? __fget+0x40c/0x650 [ 2534.608161] ? expand_files.part.8+0x9a0/0x9a0 [ 2534.612735] ? trace_hardirqs_off+0xd/0x10 [ 2534.616955] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2534.622062] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2534.627158] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2534.632172] ? fget_raw+0x20/0x20 [ 2534.635620] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2534.640537] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2534.646324] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2534.651331] __ia32_compat_sys_ioctl+0x221/0x640 [ 2534.656080] do_fast_syscall_32+0x345/0xf9b [ 2534.660386] ? do_int80_syscall_32+0x880/0x880 [ 2534.664957] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 2534.669787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2534.675319] ? syscall_return_slowpath+0x30f/0x5c0 [ 2534.680238] ? sysret32_from_system_call+0x5/0x46 [ 2534.685070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2534.689906] entry_SYSENTER_compat+0x70/0x7f [ 2534.694298] RIP: 0023:0xf7fd4cb9 [ 2534.697642] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2534.705337] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000c0145401 [ 2534.712591] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2534.719844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2534.727098] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2534.734353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 7: 2018/05/08 18:56:20 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:20 executing program 0: 2018/05/08 18:56:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:20 executing program 2: 2018/05/08 18:56:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:20 executing program 5: 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:20 executing program 7: 2018/05/08 18:56:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:20 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:20 executing program 0: 2018/05/08 18:56:20 executing program 2: 2018/05/08 18:56:20 executing program 5: 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 7: 2018/05/08 18:56:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:20 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:20 executing program 5: 2018/05/08 18:56:20 executing program 2: 2018/05/08 18:56:20 executing program 0: 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 7: 2018/05/08 18:56:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r0 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) dup3(r0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 2: 2018/05/08 18:56:20 executing program 0: 2018/05/08 18:56:20 executing program 5: 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=0x8a, 0x4) 2018/05/08 18:56:20 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:20 executing program 2: 2018/05/08 18:56:20 executing program 7: 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 0: 2018/05/08 18:56:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r0 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) dup3(r0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 5: 2018/05/08 18:56:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 2: 2018/05/08 18:56:20 executing program 7: 2018/05/08 18:56:20 executing program 5: 2018/05/08 18:56:20 executing program 0: 2018/05/08 18:56:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r0 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)) dup3(r0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:20 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:21 executing program 7: 2018/05/08 18:56:21 executing program 5: 2018/05/08 18:56:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:21 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:21 executing program 2: 2018/05/08 18:56:21 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:21 executing program 0: 2018/05/08 18:56:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4) 2018/05/08 18:56:21 executing program 5: 2018/05/08 18:56:21 executing program 2: 2018/05/08 18:56:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x270, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:21 executing program 0: 2018/05/08 18:56:21 executing program 7: 2018/05/08 18:56:21 executing program 5: 2018/05/08 18:56:21 executing program 2: 2018/05/08 18:56:21 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:21 executing program 2: 2018/05/08 18:56:22 executing program 0: 2018/05/08 18:56:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:22 executing program 2: 2018/05/08 18:56:22 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/08 18:56:22 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4) 2018/05/08 18:56:22 executing program 7: 2018/05/08 18:56:22 executing program 5: 2018/05/08 18:56:22 executing program 7: 2018/05/08 18:56:22 executing program 0: 2018/05/08 18:56:22 executing program 2: 2018/05/08 18:56:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:22 executing program 5: 2018/05/08 18:56:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:22 executing program 4: 2018/05/08 18:56:22 executing program 7: 2018/05/08 18:56:22 executing program 2: 2018/05/08 18:56:23 executing program 0: 2018/05/08 18:56:23 executing program 5: 2018/05/08 18:56:23 executing program 2: 2018/05/08 18:56:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:23 executing program 4: 2018/05/08 18:56:23 executing program 7: 2018/05/08 18:56:23 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000d93000)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) write(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4) 2018/05/08 18:56:23 executing program 5: 2018/05/08 18:56:23 executing program 7: 2018/05/08 18:56:23 executing program 0: 2018/05/08 18:56:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:23 executing program 4: 2018/05/08 18:56:23 executing program 2: 2018/05/08 18:56:23 executing program 4: 2018/05/08 18:56:23 executing program 7: 2018/05/08 18:56:24 executing program 5: 2018/05/08 18:56:24 executing program 0: 2018/05/08 18:56:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:24 executing program 7: 2018/05/08 18:56:24 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:24 executing program 2: 2018/05/08 18:56:24 executing program 4: 2018/05/08 18:56:24 executing program 1: 2018/05/08 18:56:24 executing program 0: 2018/05/08 18:56:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:24 executing program 4: 2018/05/08 18:56:24 executing program 5: 2018/05/08 18:56:24 executing program 1: 2018/05/08 18:56:24 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:24 executing program 7: 2018/05/08 18:56:24 executing program 2: 2018/05/08 18:56:24 executing program 1: 2018/05/08 18:56:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:24 executing program 2: 2018/05/08 18:56:25 executing program 4: 2018/05/08 18:56:25 executing program 0: 2018/05/08 18:56:25 executing program 7: 2018/05/08 18:56:25 executing program 1: 2018/05/08 18:56:25 executing program 5: 2018/05/08 18:56:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb803, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:25 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:25 executing program 2: 2018/05/08 18:56:25 executing program 4: 2018/05/08 18:56:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:25 executing program 2: 2018/05/08 18:56:25 executing program 1: 2018/05/08 18:56:25 executing program 5: 2018/05/08 18:56:25 executing program 4: 2018/05/08 18:56:25 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:25 executing program 0: 2018/05/08 18:56:25 executing program 7: 2018/05/08 18:56:25 executing program 1: 2018/05/08 18:56:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:25 executing program 0: 2018/05/08 18:56:25 executing program 2: 2018/05/08 18:56:25 executing program 5: 2018/05/08 18:56:25 executing program 4: 2018/05/08 18:56:25 executing program 7: 2018/05/08 18:56:25 executing program 1: 2018/05/08 18:56:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:25 executing program 0: 2018/05/08 18:56:26 executing program 5: 2018/05/08 18:56:26 executing program 2: 2018/05/08 18:56:26 executing program 1: 2018/05/08 18:56:26 executing program 4: 2018/05/08 18:56:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:26 executing program 7: 2018/05/08 18:56:26 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:26 executing program 0: 2018/05/08 18:56:26 executing program 0: 2018/05/08 18:56:26 executing program 1: 2018/05/08 18:56:26 executing program 4: 2018/05/08 18:56:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:26 executing program 2: 2018/05/08 18:56:26 executing program 5: 2018/05/08 18:56:26 executing program 1: 2018/05/08 18:56:26 executing program 7: 2018/05/08 18:56:27 executing program 4: 2018/05/08 18:56:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:27 executing program 0: 2018/05/08 18:56:27 executing program 5: 2018/05/08 18:56:27 executing program 1: 2018/05/08 18:56:27 executing program 2: 2018/05/08 18:56:27 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:27 executing program 7: 2018/05/08 18:56:27 executing program 1: 2018/05/08 18:56:27 executing program 4: 2018/05/08 18:56:27 executing program 7: 2018/05/08 18:56:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:27 executing program 0: 2018/05/08 18:56:27 executing program 5: 2018/05/08 18:56:28 executing program 7: 2018/05/08 18:56:28 executing program 4: 2018/05/08 18:56:28 executing program 1: 2018/05/08 18:56:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:28 executing program 2: 2018/05/08 18:56:28 executing program 0: 2018/05/08 18:56:28 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:28 executing program 5: 2018/05/08 18:56:28 executing program 0: 2018/05/08 18:56:28 executing program 1: 2018/05/08 18:56:28 executing program 2: 2018/05/08 18:56:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:28 executing program 4: 2018/05/08 18:56:28 executing program 7: 2018/05/08 18:56:28 executing program 5: 2018/05/08 18:56:28 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:28 executing program 1: 2018/05/08 18:56:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:28 executing program 2: 2018/05/08 18:56:28 executing program 7: 2018/05/08 18:56:28 executing program 0: 2018/05/08 18:56:28 executing program 5: 2018/05/08 18:56:28 executing program 4: 2018/05/08 18:56:28 executing program 1: 2018/05/08 18:56:28 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:28 executing program 2: 2018/05/08 18:56:28 executing program 7: 2018/05/08 18:56:28 executing program 0: 2018/05/08 18:56:28 executing program 5: 2018/05/08 18:56:28 executing program 1: 2018/05/08 18:56:28 executing program 4: 2018/05/08 18:56:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:29 executing program 4: 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 4: 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 4: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 4: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 4: 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc403000000000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 5: 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:29 executing program 4: 2018/05/08 18:56:29 executing program 2: 2018/05/08 18:56:29 executing program 7: 2018/05/08 18:56:29 executing program 0: 2018/05/08 18:56:29 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc030000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:29 executing program 1: 2018/05/08 18:56:30 executing program 0: 2018/05/08 18:56:30 executing program 4: 2018/05/08 18:56:30 executing program 2: 2018/05/08 18:56:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8030000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:30 executing program 5: 2018/05/08 18:56:30 executing program 7: 2018/05/08 18:56:30 executing program 1: 2018/05/08 18:56:30 executing program 0: 2018/05/08 18:56:30 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:30 executing program 2: 2018/05/08 18:56:30 executing program 5: 2018/05/08 18:56:30 executing program 7: 2018/05/08 18:56:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:30 executing program 4: 2018/05/08 18:56:30 executing program 1: 2018/05/08 18:56:30 executing program 2: 2018/05/08 18:56:30 executing program 0: 2018/05/08 18:56:30 executing program 5: 2018/05/08 18:56:30 executing program 7: 2018/05/08 18:56:30 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:30 executing program 1: 2018/05/08 18:56:30 executing program 4: 2018/05/08 18:56:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000e80)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) 2018/05/08 18:56:30 executing program 2: mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f00)='ns/uts\x00') 2018/05/08 18:56:30 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000074c000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) connect$l2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x1}}, 0x26) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000080)=""/51) 2018/05/08 18:56:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000200)=""/80) 2018/05/08 18:56:30 executing program 1: 2018/05/08 18:56:30 executing program 4: 2018/05/08 18:56:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:30 executing program 2: 2018/05/08 18:56:30 executing program 5: 2018/05/08 18:56:30 executing program 2: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x1000000000000202}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2002, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x1fffd, 0x0) fallocate(r1, 0x0, 0x0, 0x8008040) 2018/05/08 18:56:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) poll(&(0x7f0000000040)=[{r1, 0x41}], 0x1, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) 2018/05/08 18:56:30 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)="b5", 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000004c80)="f3da2392fc49abffe3a9805f49b6815127a455afe04500e08ea794c1488f20d82845390b94d646ee0ce52aeafcc011c1425ac16495e4d898ed6033ec50967796e265f5bf93e632323a06bef3c40f7ebeec535701152b235c191d519d51b2afa1d5f2e659195bc53dcaecdcce8f59fe5f152944b6d94ee2b438ed0207c5275448e11f5d6bfce087c6327702bfc29d5f91832f7d68bdbdf23ce12576974baa81664ab8888dde4c00cf2d89a148a5246f21948c8c7ea503955ff48bbb69a1b63b0899b3e917c01fbe0b44de6a2540d1514490ac771477d38a92789d2e26a99bba567e52cdf7193d3966fbe61b3d65560295a1c2a66b07f4ca4251058222dcf5eff757a0410c3c24dc42d15a95aa9f46945db8a0ae0c74a3a357875b1853df588694f7d992d2c3c3fdf37e79e90be2fb596282dab57dd97f6df20eafa013d5e4c5dbd5967d0f794ab8a8839ebb03f8568c8d1f3e7919498cc9736799cf9edd1abbcf0045a1ec7f7114692059e586f69909e4bf3e3e7b2393b49de752a4bb8c3996beefa31ae077dce0fb96448d591fc653b4e179dbeb5c4705178bfaaf52cf75909e645a53b096d0b29b7b1d11b11214b0f23b0771a17d172015a56f2e9a822f24e20da6d00a52bed88c0919e36f96929269f298cf4485e2441315838197547e8e90b9b05faae694ed4119ced03b42c64978bf4f0b337256c7fa8206b4876653ba1d8fb08b09b8f4bf78bb5dbb4ac965f4882ec069fd517ba9ed3be13bc2b595e9456b83f68e5bc888adb68e760a365c06551ee6e6539ec87f4a859c3b78d3fbb61072f9bfbd7c17f64c1bad2d813763ec69265223dda4575bfb44c57f471d6330806842d07563f58cad1ce8f819555f6ce37456f581328052a310b51a2e161671312af94ad2516981c183123ca07b9efbd818b008b0c44f74ce5bca31ddef975d3619d6396ed18f793f1e49ed74624d347cf1bc5b69dcb92dccb8ccba6364c1b586e421608bfd4255eb01823dbdf4818e3a0b525caa58357211790b20a897ebda73895003cb240da8778a17434335b30f11c036191d67d8d1ce668f651be5c32d933147ddea7f7225f584244f5aacd5744eaa1c2f300d4d53b30377c75d00056d8d3b18d82a1c0f87eecca5067b9307d979f2e2976d62e55a014be5b520a6f0b384a8ecdeff90d82e7b31a0d9a0cfd69158d31965c7b2465a48519dd00977265a430a675e5f01819a2c55da701e8eb1c0e820164f4419064c1308353cd772dcf463bd0628b8443073d11df9c0fd296f78f40cdf762452bf5b8f71232612844179d16e96bf82fa7df8f76d16cd29347c247c7492f083fb9b03e1d8ede8cb8e1d1d34c293a8dadbf1224e259e53b0fc6ea675c5239c841eb2e03d3da63dcaf78a3f7ddd2533d486393009550764406feb9fbced643b60132a2434713a6912b9c552746c13e7afed1a744dec7841782f96b5689ba2e95a02a087cb64b2bed189d0b882f47a2681efe6da5ccce7e65def926e60260a5c5d0c60229c714d3d5bf92198922a518d7e01502674cf1b20f7e7ef6872d4b31f505557d2b181e5283ff489f320085e231dbb71bf16a60de79a6f6caf89047464b0dbaa6fd50e909d26b378f62b6c16a5aa0da1b403a17f3f72347831134aa35ac780c47af96d587294f9e080ebedcb9df23b480b773d9ea55d7671ab9f24927364d956783dbdec5eea8d65fc8dbf44085378874820cad1073d2bfb01928bb715db5b2d95320340cc69c66da0d06e10f6eeeea07363507a46b968f262582de6d5f824fb088cd386e454d7cc21b89326d30cf08d69427d5faecc5fed424330c77dc3681ae62d1aa6dba639e51c9a89fb2de79d578b894ea16fb352180ac3d451247fb662f75468ed8f7e48c906f7b02ad6806ab5d8adb3b491730f093358c9436ff456d31f8c04353705bb148399bab19e9fc37b4c56d6d03fd41568d79e3d378f316a0e25c28d6d6ae8a0ddfaeaa1dc9f80bf62993c7b150c312e8cf2e90e0483088f68a3ffe857a0e663e8fcdaff28a3eb9faf40ac9a46f9416a8a38540552924f3996915d150ea81d84d1b4b60783f174e57483ce182e0bec9b4d4e1da30e89225ac59a505506a979191f5fbf99b4705a0bcefeb22cc43df6d93f61acafe53448ad4a30e487768dcbfbe2c3d1ee", 0x601}], 0x1) read(r0, &(0x7f0000000080)=""/14, 0x2f8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x201}], 0x1) recvmsg(r0, &(0x7f0000000c80)={&(0x7f0000000540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000002c80)=""/4096, 0x1000}], 0x1, &(0x7f0000003c80)=""/4096, 0x1000}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x4d1) close(r0) 2018/05/08 18:56:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b85000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000000c0)=0xb) futex(&(0x7f0000d12000), 0x85, 0x0, &(0x7f0000003ff0), &(0x7f0000000040), 0x0) 2018/05/08 18:56:31 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000edf000), 0xfffffffffffffd81, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/08 18:56:31 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x2}, 0x10) 2018/05/08 18:56:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:31 executing program 7: perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001f80)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001f40)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000e00)=@destroy_id={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 2018/05/08 18:56:31 executing program 4: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000005c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x1}, 0x20) 2018/05/08 18:56:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:31 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/08 18:56:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:31 executing program 2: pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) 2018/05/08 18:56:31 executing program 7: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/05/08 18:56:31 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000180)="74086e750000000000000000008c0010e533188f1a00000039cbcf04d1d844bec1e6efa774a8f8f5414392898c60726d", 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x800) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/08 18:56:31 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0), 0x4) 2018/05/08 18:56:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403000000000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:32 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0xffffffff00000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000740)={{0x6, 0x0, 0x0, 0x0, "b333bed523af39e3bcc65d296abc7a4a7d690b1b4c5e7cb52931e695fd636b247a7ae4b9a57ea78b2bfb1ae7"}}) 2018/05/08 18:56:32 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_delete(0x0) 2018/05/08 18:56:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:32 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) [ 2547.626708] FAULT_FLAG_ALLOW_RETRY missing 30 [ 2547.631453] CPU: 0 PID: 9615 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #64 [ 2547.638639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2547.647980] Call Trace: [ 2547.650584] dump_stack+0x1b9/0x294 [ 2547.654235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2547.659529] ? kasan_check_write+0x14/0x20 [ 2547.663758] ? do_raw_spin_lock+0xc1/0x200 [ 2547.668093] handle_userfault.cold.32+0x44/0x5a [ 2547.672754] ? handle_userfault+0x16c6/0x2760 [ 2547.677245] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 2547.681820] ? debug_check_no_locks_freed+0x310/0x310 [ 2547.686998] ? find_held_lock+0x36/0x1c0 [ 2547.691056] ? print_usage_bug+0xc0/0xc0 [ 2547.695104] ? print_usage_bug+0xc0/0xc0 [ 2547.699154] ? lock_downgrade+0x8e0/0x8e0 [ 2547.703289] ? finish_task_switch+0x182/0x810 [ 2547.707824] ? kasan_check_read+0x11/0x20 [ 2547.711972] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2547.716379] ? check_noncircular+0x20/0x20 [ 2547.720612] ? __lock_acquire+0x7f5/0x5140 [ 2547.724837] ? _raw_spin_unlock_irq+0x27/0x70 [ 2547.729317] ? graph_lock+0x170/0x170 [ 2547.733112] ? find_held_lock+0x36/0x1c0 [ 2547.737167] ? lock_downgrade+0x8e0/0x8e0 [ 2547.741310] ? kasan_check_read+0x11/0x20 [ 2547.745454] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2547.749850] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2547.754430] ? kasan_check_write+0x14/0x20 [ 2547.758655] ? do_raw_spin_lock+0xc1/0x200 [ 2547.762884] __handle_mm_fault+0x38d8/0x4310 [ 2547.767287] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 2547.772034] ? graph_lock+0x170/0x170 [ 2547.775825] ? find_held_lock+0x36/0x1c0 [ 2547.779881] ? lock_downgrade+0x8e0/0x8e0 [ 2547.784036] ? handle_mm_fault+0x8c0/0xc70 [ 2547.788263] handle_mm_fault+0x53a/0xc70 [ 2547.792321] ? __handle_mm_fault+0x4310/0x4310 [ 2547.796894] ? find_vma+0x34/0x190 [ 2547.800425] __do_page_fault+0x60b/0xe40 [ 2547.804478] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2547.809662] ? mm_fault_error+0x380/0x380 [ 2547.813808] ? graph_lock+0x170/0x170 [ 2547.817596] do_page_fault+0xee/0x8a7 [ 2547.822272] ? vmalloc_sync_all+0x30/0x30 [ 2547.826414] ? find_held_lock+0x36/0x1c0 [ 2547.830470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2547.835306] page_fault+0x1e/0x30 [ 2547.838748] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2547.844372] RSP: 0018:ffff8801b735f8a8 EFLAGS: 00010203 [ 2547.849729] RAX: 0000000000000004 RBX: 0000000000000014 RCX: 0000000000000002 [ 2547.856998] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801b735f978 [ 2547.864258] RBP: ffff8801b735f8e0 R08: ffffed0036e6bf32 R09: ffffed0036e6bf2f [ 2547.871522] R10: ffffed0036e6bf31 R11: 0000000000000003 R12: 0000000020013014 [ 2547.878777] R13: 0000000020013000 R14: ffff8801b735f978 R15: 00007ffffffff000 [ 2547.886058] ? _copy_from_user+0x10d/0x150 [ 2547.890286] __snd_timer_user_ioctl+0x10bf/0x2e30 [ 2547.895116] ? exit_robust_list+0x290/0x290 [ 2547.899435] ? is_bpf_text_address+0xd7/0x170 [ 2547.903934] ? snd_timer_user_open+0x180/0x180 [ 2547.908507] ? find_held_lock+0x36/0x1c0 [ 2547.912562] ? lock_downgrade+0x8e0/0x8e0 [ 2547.916703] ? kasan_check_read+0x11/0x20 [ 2547.920837] ? rcu_is_watching+0x85/0x140 [ 2547.924972] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 2547.930156] ? __fget+0x40c/0x650 [ 2547.933601] ? expand_files.part.8+0x9a0/0x9a0 [ 2547.938170] ? trace_hardirqs_off+0xd/0x10 [ 2547.942393] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2547.947494] snd_timer_user_ioctl_compat+0x6e8/0x930 [ 2547.952587] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2547.957594] ? fget_raw+0x20/0x20 [ 2547.961044] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 2547.965964] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 2547.971669] ? __snd_timer_user_ioctl+0x2e30/0x2e30 [ 2547.976675] __ia32_compat_sys_ioctl+0x221/0x640 [ 2547.981428] do_fast_syscall_32+0x345/0xf9b [ 2547.985743] ? do_int80_syscall_32+0x880/0x880 [ 2547.990309] ? _raw_spin_unlock_irq+0x27/0x70 [ 2547.994795] ? finish_task_switch+0x1ca/0x810 [ 2547.999279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2548.004808] ? syscall_return_slowpath+0x30f/0x5c0 [ 2548.009732] ? sysret32_from_system_call+0x5/0x46 [ 2548.014579] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2548.019412] entry_SYSENTER_compat+0x70/0x7f [ 2548.023807] RIP: 0023:0xf7fd4cb9 2018/05/08 18:56:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000380)) socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8947, &(0x7f0000000140)={"626f6e64303a01996900030000000008"}) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/05/08 18:56:33 executing program 0: pipe(&(0x7f0000000000)) 2018/05/08 18:56:33 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:33 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioperm(0x0, 0x8, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'gre0\x00', 'ip6tnl0\x00', 'bcsf0\x00', 'veth0_to_bridge\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xc0, 0x110}, [@common=@log={'log\x00', 0x28, {{0x0, "8b8c2c6712e3610d09278620d2608168e47d700a9d26668472ac6d927e5f"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1e0) 2018/05/08 18:56:33 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8), 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:33 executing program 4: add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f0000000340)='c', 0x1, 0xfffffffffffffffe) 2018/05/08 18:56:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000577fc8)={&(0x7f0000000040)={0x20000010}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540100001a0001000000000000968086bcf5e46a910000000000ffffac14ffaaff020000000000000000000000000001000022000000000000ebffffff000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000064001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800000080000000aafb91bab2b12fab7fd25f3ca823dc353264aff479000000"], 0x3}, 0x1}, 0x0) [ 2548.027154] RSP: 002b:00000000f5fd00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 2548.034847] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000c0145401 [ 2548.042104] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2548.049358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2548.056615] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2548.063869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2548.125713] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/08 18:56:33 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) [ 2548.172079] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/08 18:56:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x0) 2018/05/08 18:56:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) clock_gettime(0x0, &(0x7f0000006f00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f0000001a00)=@sco, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002d40)=""/107, 0x6b}, {&(0x7f0000002ec0)=""/115, 0x73}], 0x2, &(0x7f0000003180)=""/117, 0x75}}, {{&(0x7f0000003200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003280)=""/1, 0x1}, {&(0x7f0000004500)=""/238, 0xee}], 0x2, &(0x7f0000004680)=""/201, 0xc9}}, {{&(0x7f0000004780)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006d40)=""/69, 0x45}}], 0x3, 0x0, &(0x7f0000006f40)={0x0, r2+10000000}) 2018/05/08 18:56:34 executing program 2: setitimer(0x0, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, &(0x7f0000000540)) 2018/05/08 18:56:34 executing program 7: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/05/08 18:56:34 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e030000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:34 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8), 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:34 executing program 5: r0 = socket$kcm(0x2, 0xa, 0x0) r1 = socket$kcm(0x2, 0xa, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@ax25={0x3, {"4e83c8d6b86b7e"}, 0x8}, 0x80, &(0x7f0000002bc0), 0x0, &(0x7f0000004240)=ANY=[]}, 0x0) socketpair(0x4, 0x80003, 0xff, &(0x7f00000002c0)) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x8000a, 0x4, &(0x7f0000000880)) socket$kcm(0x29, 0x7, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) gettid() socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='/\x00', &(0x7f0000000180)='efs\x00', 0x801410, &(0x7f0000000280)="51a85dbf507149b2304d910ffedb3d93251b20eeb301ae26a6") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)={&(0x7f00000008c0)='./file0/file0\x00', 0x0, 0x8}, 0x10) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)="676673326d65746100d46d94251f7b91eed807579a5da0f4a4c9952beff1ce32ee727a7ed1fd0e14595f6d2fcc3e6e9dc7bb64a8b7e8ad26dd7100c20a81772c9b411ffe8efd323a5e0168676d724ec893911f684dfeee80b03df4e53db2a8e265bc38192f15e0c82504722b199772c29e088beca4c60f4f9be1291a25de55cd2e9647b36fbffcca659d61030135a7c4e02bb82dd698e4532d6091a1", 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000200)='lo\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000900)) recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000fc0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001040)=""/92, 0x5c}, {&(0x7f00000010c0)=""/186, 0xba}, {&(0x7f0000001180)=""/110, 0x6e}, {&(0x7f0000001200)=""/130, 0x82}, {&(0x7f00000012c0)=""/180, 0xb4}, {&(0x7f0000001380)=""/192, 0xc0}, {&(0x7f0000001440)=""/146, 0x92}], 0x7, &(0x7f0000001580)=""/91, 0x5b, 0x10000}, 0x2000) recvmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000740)=""/253, 0xfd, 0x9}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x9, 0x4, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x800, 0x7, 0x8, 0x1, 0xffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000340)='GPL\x00', 0x3f, 0x2a, &(0x7f0000000380)=""/42, 0x41f00, 0x1, [], r6}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) close(r1) 2018/05/08 18:56:34 executing program 2: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_timedsend(r0, &(0x7f0000118fff), 0x0, 0x0, &(0x7f000076bff0)={0x77359400}) mq_timedreceive(r0, &(0x7f00000000c0)=""/131, 0x83, 0x10001, 0x0) 2018/05/08 18:56:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002b80), 0x0) fallocate(r1, 0x11, 0x0, 0x100) 2018/05/08 18:56:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:34 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000013000304000000000000000000000000", @ANYBLOB="00000000000000001c001600180001001400070000e95600000000000000000000000000"], 0x2}, 0x1}, 0x0) [ 2549.196834] gfs2: gfs2 mount does not exist 2018/05/08 18:56:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2549.218501] “‘hMþ=ôå=²¨: renamed from lo 2018/05/08 18:56:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x2, 0x11, r1, 0x0) 2018/05/08 18:56:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x730000, 0x0}, 0x205) [ 2549.298361] gfs2: gfs2 mount does not exist [ 2549.624539] device erspan0 left promiscuous mode [ 2549.630396] bridge0: port 3(erspan0) entered disabled state [ 2549.670482] IPVS: stopping master sync thread 28993 ... [ 2549.676418] IPVS: stopping backup sync thread 28043 ... [ 2549.683444] device bridge_slave_1 left promiscuous mode [ 2549.689187] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.698760] device bridge_slave_0 left promiscuous mode [ 2549.704323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.741225] team0 (unregistering): Port device team_slave_1 removed [ 2549.752682] team0 (unregistering): Port device team_slave_0 removed [ 2549.764685] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2549.781841] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2549.808692] bond0 (unregistering): Released all slaves 2018/05/08 18:56:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:35 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f0000003880)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000080)}, 0x0) 2018/05/08 18:56:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000001080)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x80000020032, 0xffffffffffffffff, 0x0) ioctl$fiemap(r2, 0x40087602, &(0x7f0000000000)) 2018/05/08 18:56:35 executing program 5: r0 = socket$kcm(0x2, 0xa, 0x0) r1 = socket$kcm(0x2, 0xa, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@ax25={0x3, {"4e83c8d6b86b7e"}, 0x8}, 0x80, &(0x7f0000002bc0), 0x0, &(0x7f0000004240)=ANY=[]}, 0x0) socketpair(0x4, 0x80003, 0xff, &(0x7f00000002c0)) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x8000a, 0x4, &(0x7f0000000880)) socket$kcm(0x29, 0x7, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) gettid() socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='/\x00', &(0x7f0000000180)='efs\x00', 0x801410, &(0x7f0000000280)="51a85dbf507149b2304d910ffedb3d93251b20eeb301ae26a6") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)={&(0x7f00000008c0)='./file0/file0\x00', 0x0, 0x8}, 0x10) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)="676673326d65746100d46d94251f7b91eed807579a5da0f4a4c9952beff1ce32ee727a7ed1fd0e14595f6d2fcc3e6e9dc7bb64a8b7e8ad26dd7100c20a81772c9b411ffe8efd323a5e0168676d724ec893911f684dfeee80b03df4e53db2a8e265bc38192f15e0c82504722b199772c29e088beca4c60f4f9be1291a25de55cd2e9647b36fbffcca659d61030135a7c4e02bb82dd698e4532d6091a1", 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000200)='lo\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000900)) recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000fc0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001040)=""/92, 0x5c}, {&(0x7f00000010c0)=""/186, 0xba}, {&(0x7f0000001180)=""/110, 0x6e}, {&(0x7f0000001200)=""/130, 0x82}, {&(0x7f00000012c0)=""/180, 0xb4}, {&(0x7f0000001380)=""/192, 0xc0}, {&(0x7f0000001440)=""/146, 0x92}], 0x7, &(0x7f0000001580)=""/91, 0x5b, 0x10000}, 0x2000) recvmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000740)=""/253, 0xfd, 0x9}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x9, 0x4, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x800, 0x7, 0x8, 0x1, 0xffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000340)='GPL\x00', 0x3f, 0x2a, &(0x7f0000000380)=""/42, 0x41f00, 0x1, [], r6}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) close(r1) 2018/05/08 18:56:35 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) sendto$inet6(r0, &(0x7f0000001380), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/05/08 18:56:35 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/05/08 18:56:35 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(0xffffffffffffffff, &(0x7f000042bff8), 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000200)) dup3(r1, r0, 0x0) 2018/05/08 18:56:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00006c1000)=@ipv6_newroute={0x1c, 0x18, 0x501, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1}, 0x0) 2018/05/08 18:56:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a02000000000000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/08 18:56:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@req) 2018/05/08 18:56:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c00d6f04aeee7ce0282a1680b5c8b9fff62a7adc5c4bc5efd7b72d6831b373a6ff705e062dd7ebcff83b27e9a58be117a42d6dc0a89f9e8cb25eaf069537c444f1dfff4a839ff14c0d127b82ff910165070a6bcd7d61bb3f1d887a1e4b05c5130b766681a6cf3fbd79cff692268b643d99ebb59308374617d9a87d4ffb22f6d32863731b9a09190e4a365968b63edf8a43bdec2f88e171d5fedb6ee5f164aa0a6fa5346be6ebbb672fbf6eba9c10e3d13730fdf1cb7792f4fc8385fde555a94dbbe07688a78a8def773911cd37a32c846defb430ba87d65fd332c63fd0ad026c324d10795f1918d3c432f4a614d3d01c6ba681e37a3729e62013b6a17bd4d3310d0cd62a6c3ee7e49cdcc56a492de257831534349062de59329") 2018/05/08 18:56:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00006c1000)=@ipv6_newroute={0x20, 0x18, 0x501, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4, 0x8}]}, 0x20}, 0x1}, 0x0) 2018/05/08 18:56:35 executing program 7: 2018/05/08 18:56:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000080)) timer_delete(0x0) 2018/05/08 18:56:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5d7254f57af4e92c2d3c", 0xa}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/08 18:56:35 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) recvmmsg(r1, &(0x7f0000007ac0)=[{{&(0x7f0000002c40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/57, 0x39}}], 0x1, 0x0, &(0x7f0000007cc0)) recvmmsg(r0, &(0x7f0000525000)=[{{&(0x7f00003ec000)=@l2, 0xe, &(0x7f00002c6fd0), 0x0, &(0x7f0000239000), 0xfffffffffffffd54}}], 0x1, 0x0, 0x0) 2018/05/08 18:56:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2550.958856] WARNING: CPU: 1 PID: 30710 at net/ipv6/xfrm6_tunnel.c:345 xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 2550.968821] Kernel panic - not syncing: panic_on_warn set ... [ 2550.968821] [ 2550.976179] CPU: 1 PID: 30710 Comm: kworker/u4:0 Not tainted 4.17.0-rc4+ #64 [ 2550.983356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2550.992719] Workqueue: netns cleanup_net [ 2550.996770] Call Trace: [ 2550.999352] dump_stack+0x1b9/0x294 [ 2551.002965] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2551.008148] ? xfrm6_tunnel_net_exit+0x1e0/0x4f0 [ 2551.012889] panic+0x22f/0x4de [ 2551.016064] ? add_taint.cold.5+0x16/0x16 [ 2551.020197] ? __warn.cold.8+0x148/0x1b3 [ 2551.024242] ? __warn.cold.8+0x117/0x1b3 [ 2551.028298] ? xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 2551.033053] __warn.cold.8+0x163/0x1b3 [ 2551.036933] ? xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 2551.041685] report_bug+0x252/0x2d0 [ 2551.045299] do_error_trap+0x1de/0x490 [ 2551.049182] ? lock_downgrade+0x8e0/0x8e0 [ 2551.053322] ? math_error+0x420/0x420 [ 2551.057109] ? find_held_lock+0x36/0x1c0 [ 2551.061163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2551.065998] do_invalid_op+0x1b/0x20 [ 2551.069736] invalid_op+0x14/0x20 [ 2551.073178] RIP: 0010:xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 2551.078522] RSP: 0018:ffff8801af4173d8 EFLAGS: 00010293 [ 2551.083869] RAX: ffff8801d3306680 RBX: ffff8801a07c5a78 RCX: ffffffff868fefd6 [ 2551.091124] RDX: 0000000000000000 RSI: ffffffff868fefe0 RDI: 0000000000000007 [ 2551.098379] RBP: ffff8801af4174f8 R08: ffff8801d3306680 R09: ffffed003b5e46c2 [ 2551.105632] R10: 0000000000000003 R11: 0000000000000003 R12: 00000000000000ff [ 2551.112891] R13: ffffed0035e82e82 R14: ffff8801af4174d0 R15: ffff8801cb524780 [ 2551.120201] ? xfrm6_tunnel_net_exit+0x2b6/0x4f0 [ 2551.124952] ? xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 2551.129697] ? xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 2551.134438] ? xfrm6_tunnel_alloc_spi+0xe20/0xe20 [ 2551.139265] ? xt_proto_fini+0x279/0x330 [ 2551.143306] ? xt_proto_init+0x840/0x840 [ 2551.147360] ? qfq_dump_class+0x55/0x620 [ 2551.151418] ? ip6t_unregister_table+0x70/0x70 [ 2551.155986] ? xfrm6_tunnel_alloc_spi+0xe20/0xe20 [ 2551.160818] ops_exit_list.isra.7+0xb0/0x160 [ 2551.165221] cleanup_net+0x51d/0xb20 [ 2551.168928] ? lock_downgrade+0x8e0/0x8e0 [ 2551.173078] ? peernet2id_alloc+0x3e0/0x3e0 [ 2551.177384] ? find_held_lock+0x36/0x1c0 [ 2551.181441] ? graph_lock+0x170/0x170 [ 2551.185233] ? lock_acquire+0x1dc/0x520 [ 2551.189198] ? process_one_work+0xb46/0x1b50 [ 2551.193603] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2551.198702] ? __lock_is_held+0xb5/0x140 [ 2551.202768] process_one_work+0xc1e/0x1b50 [ 2551.207004] ? finish_task_switch+0x28b/0x810 [ 2551.211503] ? pwq_dec_nr_in_flight+0x490/0x490 [ 2551.216173] ? __schedule+0x809/0x1e30 [ 2551.220056] ? __perf_event_task_sched_in+0x247/0xb80 [ 2551.225238] ? retint_kernel+0x10/0x10 [ 2551.229110] ? graph_lock+0x170/0x170 [ 2551.232893] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2551.237897] ? retint_kernel+0x10/0x10 [ 2551.241771] ? find_held_lock+0x36/0x1c0 [ 2551.245836] ? lock_acquire+0x1dc/0x520 [ 2551.249793] ? worker_thread+0x41f/0x1440 [ 2551.253923] ? lock_downgrade+0x8e0/0x8e0 [ 2551.258060] ? lock_release+0xa10/0xa10 [ 2551.262028] ? kasan_check_read+0x11/0x20 [ 2551.266167] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2551.270760] worker_thread+0x1cc/0x1440 [ 2551.274721] ? process_one_work+0x1b50/0x1b50 [ 2551.279204] ? graph_lock+0x170/0x170 [ 2551.282993] ? find_held_lock+0x36/0x1c0 [ 2551.287055] ? find_held_lock+0x36/0x1c0 [ 2551.291112] ? __schedule+0x1e30/0x1e30 [ 2551.295082] ? do_raw_spin_unlock+0x9e/0x2e0 [ 2551.299473] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 2551.304044] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 2551.309144] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 2551.314154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2551.319678] ? __kthread_parkme+0x1b7/0x280 [ 2551.323988] kthread+0x345/0x410 [ 2551.327343] ? process_one_work+0x1b50/0x1b50 [ 2551.331828] ? kthread_bind+0x40/0x40 [ 2551.335616] ret_from_fork+0x3a/0x50 [ 2551.340389] Dumping ftrace buffer: [ 2551.344507] (ftrace buffer empty) [ 2551.348202] Kernel Offset: disabled [ 2551.351818] Rebooting in 86400 seconds..