INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. 2018/04/21 02:18:00 fuzzer started 2018/04/21 02:18:01 dialing manager at 10.128.0.26:33559 syzkaller login: [ 53.449805] can: request_module (can-proto-0) failed. [ 53.459324] can: request_module (can-proto-0) failed. 2018/04/21 02:18:26 kcov=true, comps=true 2018/04/21 02:18:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8) 2018/04/21 02:18:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="b04bcada67a3f61e84"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 02:18:30 executing program 7: r0 = perf_event_open(&(0x7f0000a0f000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000bfc000)=0x10000000) 2018/04/21 02:18:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}, 0x1}, 0x0) 2018/04/21 02:18:30 executing program 4: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000a8000)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r0, &(0x7f00008d8000)=[{0x3, 0xcfde}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) 2018/04/21 02:18:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2018/04/21 02:18:30 executing program 5: r0 = gettid() capset(&(0x7f0000000140)={0x19980330, r0}, &(0x7f0000000180)) 2018/04/21 02:18:30 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000012fe4)={0x1, 0x9, 0x7, 0x4}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000bf3fe0)={r0, &(0x7f0000000200)="cb", &(0x7f000062c000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000007000)={r0, &(0x7f0000001140), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000016fe8)={r0, &(0x7f000032ffd9), &(0x7f0000016000)}, 0x18) [ 59.343746] IPVS: ftp: loaded support on port[0] = 21 [ 59.446500] IPVS: ftp: loaded support on port[0] = 21 [ 59.493874] IPVS: ftp: loaded support on port[0] = 21 [ 59.509570] IPVS: ftp: loaded support on port[0] = 21 [ 59.510607] IPVS: ftp: loaded support on port[0] = 21 [ 59.515381] IPVS: ftp: loaded support on port[0] = 21 [ 59.527453] IPVS: ftp: loaded support on port[0] = 21 [ 59.537488] IPVS: ftp: loaded support on port[0] = 21 [ 61.352231] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.358752] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.378472] device bridge_slave_0 entered promiscuous mode [ 61.473489] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.479901] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.519370] device bridge_slave_1 entered promiscuous mode [ 61.566073] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.572490] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.627992] device bridge_slave_0 entered promiscuous mode [ 61.673158] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.679565] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.703878] device bridge_slave_0 entered promiscuous mode [ 61.718337] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.724724] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.744990] device bridge_slave_0 entered promiscuous mode [ 61.757370] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.763777] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.772997] device bridge_slave_1 entered promiscuous mode [ 61.787312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.808758] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.815313] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.837435] device bridge_slave_1 entered promiscuous mode [ 61.853805] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.860191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.893251] device bridge_slave_0 entered promiscuous mode [ 61.900827] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.907328] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.921719] device bridge_slave_1 entered promiscuous mode [ 61.929439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.938845] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.945218] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.958879] device bridge_slave_0 entered promiscuous mode [ 61.975326] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.981704] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.992187] device bridge_slave_0 entered promiscuous mode [ 62.000990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.008221] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.014615] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.030559] device bridge_slave_1 entered promiscuous mode [ 62.044675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.051864] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.058244] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.085993] device bridge_slave_0 entered promiscuous mode [ 62.102070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.111914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.126394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.133746] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.140251] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.172518] device bridge_slave_1 entered promiscuous mode [ 62.196644] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.203010] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.217969] device bridge_slave_1 entered promiscuous mode [ 62.224911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.250195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.256581] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.288313] device bridge_slave_1 entered promiscuous mode [ 62.304087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.324269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.343389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.351347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.407502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.426700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.443888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.457619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.509092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.558722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.601010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.643201] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.651900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.721414] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.764579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.818274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.833218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.840934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.858758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.868825] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.877150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.906274] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.949956] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.963501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.970448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.995138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.002060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.016730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.025152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.032522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.064458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.082136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.100283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.107155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.122901] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.190490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.201121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.208821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.227557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.234450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.254603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.261470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.310929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.318546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.344126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.356450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.384080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.390937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.407359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.414237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.429736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.439920] team0: Port device team_slave_0 added [ 63.471108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.485382] team0: Port device team_slave_0 added [ 63.492747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.506150] team0: Port device team_slave_0 added [ 63.511569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.534753] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.553665] team0: Port device team_slave_1 added [ 63.584233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.607773] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.629155] team0: Port device team_slave_1 added [ 63.652229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.665402] team0: Port device team_slave_1 added [ 63.701988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.723200] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.742062] team0: Port device team_slave_0 added [ 63.781384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.799539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.830838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.842290] team0: Port device team_slave_0 added [ 63.853752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.863952] team0: Port device team_slave_0 added [ 63.870848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.879893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.886977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.914798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.934577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.950379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.962900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.969910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.978251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.988357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.995722] team0: Port device team_slave_0 added [ 64.003513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.011474] team0: Port device team_slave_0 added [ 64.020572] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.030055] team0: Port device team_slave_1 added [ 64.037519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.044830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.055827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.067375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.078790] team0: Port device team_slave_1 added [ 64.093999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.104740] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.116715] team0: Port device team_slave_1 added [ 64.127495] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.141469] team0: Port device team_slave_1 added [ 64.154239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.171220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.185552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.197420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.207260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.215738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.222794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.231650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.239741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.247214] team0: Port device team_slave_1 added [ 64.257331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.268787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.277800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.291389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.309578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.325583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.335577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.342411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.351256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.360329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.368695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.377822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.392684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.401590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.410624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.421208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.469675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.495429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.515951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.523637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.531451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.538835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.546621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.554430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.562066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.569532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.577074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.584642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.594081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.601351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.609585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.619456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.630895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.640665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.650244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.665543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.692251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.712629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.727237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.738952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.762259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.799688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.806971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.816503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.827316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.840167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.849787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.857384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.871230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.902426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.923589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.938041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.946710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.957939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.965491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.973783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.986648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 65.007111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 65.015401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.030139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.065429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.085592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.903820] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.910347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.917376] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.923762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.943646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.951745] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.958102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.964706] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.971076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.982374] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.988837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.999303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.092302] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.098711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.105374] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.111748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.139474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.149183] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.155551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.162160] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.168530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.178604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.383316] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.389732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.396376] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.402759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.426432] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.436397] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.442774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.449382] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.455748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.471721] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.486478] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.492848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.499487] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.505837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.551577] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.568348] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.574734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.581383] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.587765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.623774] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.040246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.050442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.076616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.088731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.095759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.103198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.884461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.968487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.166939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.361993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.395535] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.405943] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.508112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.549608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.569461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.579784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.722288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.784782] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.791201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.801473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.858108] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.951571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.957814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.969734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.984786] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.996434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 72.009441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 72.134520] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 72.256399] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.287268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.296227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.306842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.344800] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.358936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.369467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.409268] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.469743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.476183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.487640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.505090] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.517709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.538564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.567787] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.574157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.587191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.670207] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.676916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.687452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.853656] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.872419] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.954634] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.007759] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.122280] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.213360] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 02:18:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ce6ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000072}]}) 2018/04/21 02:18:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000012ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, @sint}]}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) 2018/04/21 02:18:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8001, 0x80000001, 0x5, 0x2, 0x0, 0x7, 0x90000, 0x4, 0x80, 0x7, 0x4, 0x5, 0xff7, 0x0, 0x3ff, 0x4, 0x4, 0x6c7, 0x2, 0xfff, 0x0, 0x7ff, 0x4f, 0x0, 0x400, 0x7c, 0x5, 0x1, 0x7, 0xfbb8, 0xfffffffffffffff7, 0x8247, 0x101, 0x80000000, 0x3, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x81, 0x100000001}, 0x0, 0x2, 0x7c, 0x1, 0x4, 0x3f}, r2, 0xf, r1, 0x8) write(r0, &(0x7f0000000080)="1f00000010000900040000000000e7fb0300000408000200000004ad06ffef", 0x1f) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5bfd, 0xa00) r3 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x0, 0x0, 0x2}) 2018/04/21 02:18:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000b5df88), 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 75.482213] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 75.575269] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 75.614839] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 2018/04/21 02:18:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0x81) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/04/21 02:18:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8001, 0x80000001, 0x5, 0x2, 0x0, 0x7, 0x90000, 0x4, 0x80, 0x7, 0x4, 0x5, 0xff7, 0x0, 0x3ff, 0x4, 0x4, 0x6c7, 0x2, 0xfff, 0x0, 0x7ff, 0x4f, 0x0, 0x400, 0x7c, 0x5, 0x1, 0x7, 0xfbb8, 0xfffffffffffffff7, 0x8247, 0x101, 0x80000000, 0x3, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x81, 0x100000001}, 0x0, 0x2, 0x7c, 0x1, 0x4, 0x3f}, r2, 0xf, r1, 0x8) write(r0, &(0x7f0000000080)="1f00000010000900040000000000e7fb0300000408000200000004ad06ffef", 0x1f) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5bfd, 0xa00) r3 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x0, 0x0, 0x2}) 2018/04/21 02:18:46 executing program 5: mmap(&(0x7f0000f1f000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) mremap(&(0x7f0000f1f000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) [ 75.760780] device lo entered promiscuous mode [ 75.797084] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 75.807682] device lo left promiscuous mode 2018/04/21 02:18:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8) 2018/04/21 02:18:48 executing program 5: r0 = socket(0x1, 0x802, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) 2018/04/21 02:18:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0x81) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/04/21 02:18:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8001, 0x80000001, 0x5, 0x2, 0x0, 0x7, 0x90000, 0x4, 0x80, 0x7, 0x4, 0x5, 0xff7, 0x0, 0x3ff, 0x4, 0x4, 0x6c7, 0x2, 0xfff, 0x0, 0x7ff, 0x4f, 0x0, 0x400, 0x7c, 0x5, 0x1, 0x7, 0xfbb8, 0xfffffffffffffff7, 0x8247, 0x101, 0x80000000, 0x3, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x81, 0x100000001}, 0x0, 0x2, 0x7c, 0x1, 0x4, 0x3f}, r2, 0xf, r1, 0x8) write(r0, &(0x7f0000000080)="1f00000010000900040000000000e7fb0300000408000200000004ad06ffef", 0x1f) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5bfd, 0xa00) r3 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x0, 0x0, 0x2}) 2018/04/21 02:18:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000002380)=""/88, 0x58}], 0x1, 0x0) 2018/04/21 02:18:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40086610, &(0x7f0000000080)) 2018/04/21 02:18:48 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4112, &(0x7f0000005e0b)) 2018/04/21 02:18:48 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff0100", 0x1302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000380)}]) 2018/04/21 02:18:48 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x2, 0x1) write(r0, &(0x7f0000000080)="a74f9540ff07520c5a9ec05a2c8013d53fd7c66b678f11032ee52509e872ff8ea5b03f8cd09139bf9f3a73cfd3d2c4f69f7a298b7bdb6026717234d0d056b4058205d5911c487b9fcc3b5a024073766a6fe08393a51cdba75c4823eb0651bb901c18cc6c21e1bc3dc43b98b89ee8a89e24545fcc16262c4c84f140a8affde6fb84fddee1256d7d2c6b3d914abffd67b9629563bbefb78a086d1617235500326816243113750afdc7f882e8de3d063bda0ceb265b49ac2a0672a3e9eb7766593f8d22e584b37fdfa5fb3a10391c2ec2a4c76bdcf8c5b0fd558705dff9e650a23c624979e7a811640e216cf6b7732c6d223843ddfe30446e9dd5a35d272934ed268af9e3d6b57ab97f9b29a70df83c32a8814895411e6512b6a8be7c2fa70c1a5cd2279bc6896ffbbe9f462d4510e691f5fd094d7213d649edbda81dbb869f39c41f788f36271c2cf6b4be00631eaef54f244c45378b0baba2c04cc390f161acaf5a90a9d06394369dbf27e333141cf3d31927d6fd0c29f2389b2135cf07f06184564b83a136b41f04b88888a3c71f702f4010f6ca20928e4a752e5ab216eb183682c9b803e3eb481cea86d4a9af14efdf6b5a6d5e7701f29bd87ddcf0aa1ae3c661b5ae8a701e4bbfe3b9ca71fd5ff86f388b77345b1d61ba9961deafdd69891398559decb58c0aa8cb5b088681cad47bbe22ccb2c89b95a56822cee3cbedb551a3fbf0bcc76524aeaac8997fb09bcbe1c354492c7df4fc8009fe10246192894c91364c93c587000000000000000177637a6ce93b1f09e7f2649bca711bbc96b851c1bd7188231d8a05f3b1c05772c3f306187832940ed17798b19a8318d96eda700f4e3ec9d7e6edd56e50090b99b141f05a98fbddbe32f6f7eba7f70854f4b93f80b6e7013b0e18428494345dada1a11026ddbc61d5ee93d38b5b4d99669a99bbbcec57f09104c21a46840eb798f1eec89e1133a2af27a21f2af94a141ff5737211764906d44a1686dece9780c633af3383966bc7355ae37881a2731022b4573b4eb2a381e00ea262495fc4aa616767f5bec31a19209577bfe37f5d87b333eb9ff03641bcc5628e2750010cea07c8c23cca563968f16b975194b310e50adb5903a9d8fcab5d9af8ba1a372d52233651b76d2e1143c3ddc387c1d66ad4f563d9adf354914c8418085e5b523e9d0001cffb2fbfeeb6f6c0f22e631adaf444984eedeaee2dad4d8d6ca03fbf93c04a81f02306506ca4db8d8eab529df81526f583698b20226bd87cd23d2531b8de9a49f2c38cf3cabd4b29cbc05f3f1ad49671c019a05c04d88ecca252d4ee7afc8fb6bee501f378629c34c50fddd7767064484c7e726e75c7d84de6ca035e0e6707f30e9a480f8371f80de537bbadd688e24b89fbb624cc1fe739126b002469938051f5683218d335102a84d0bcfb75b0c398e930adc1a606613d7ffe938d2f7277939f450d4eae43af613b0c0340ab26cece2a77eb55c758b3b14e511c05b070dd7913e57ade34190d17345999c91597dc36cfa65559e39e4d6ba91e90485734a97022fc7aa51d2de22a802b2d3f1e2b53d982caebec8753dba46bbac7e2cb76c0255ca236166c22a9ce966ab16420254a9713266f9916f4e05d6f6c2fd6ef1e8d8a6ff052c7402c52cae16d08964d7575529bb480fe7beddad52ebf7220978c978a78d891d3f112aa056554ec5707536b6a27ce3340bd4f498909335fe6e20f21a638a6176d4b33facf45d272fb66635cc1338f513011be80104f6acbf00a8329835cafd97386a20d7a0d9ec74ebed02d190db1558909643ad344ca55cbb30ea2b1618842e164562d045caaf8dea14e68ea06b0bc5654828ec5e719db9bc1725a7d01ad0d561cfcb2972ad0f39016d22534b461971d601428af797db95e7477fe432c8e6970730433c52a8c9dedd00b6895101232bc62e3907151d12c392925f415164d21255479bf72f6ff6ed8c7d5521929067b13c2c9bca189b0a2deb7435c9b4e805581dcd9d1a3e5314399abe58166376345e414c5445b293dc04634d654454dcb736fb571aecd0491d94d15db25e57862c7bf813f9f16a6a4137f1852d55c8d2d1ea0e598ddd7345cd057fc0805a410c4c739d923b0cd0c6a032ad900ad4e84c0821ced5ce84cd1afa9e6c4a1f5e99dfc0cdd4c146eb0cce18d414b4d86ecff0fa5cdeca598ffe221a2cb3b1857ee30d3f6b7a83ca313cf60080645a94277844fbf40c84d9074fda2c7b223a4bde379b8d2da750336c5032af55d2496241a9de77a6a53703ead8036792e0f370fe774d9500f76d541b3c3be1acc60479f07db1e61e0001244cb7e5511d860f8f31f8c01a2e97d082b0ec413051e49a54e65ffa3e4af4dd0e0f0fb227ab775937a2c42a4da381f2a457ac175799bcd5556a462b2096211f7efc487567cde7287afd71039b7fbc290161987cb74a5c3d5018188af7933e12a0d3681570933a562e9e883fcc63495c5f54c446433c07689937595628b07662cee923a1500519f4f52490205befd0ac832160b43cf40725b2c6dc22ed0fdf0f619d404b9399494b6b7aebb334f621d352ea233420884db5cbf8f94474142eaa30ce8e5415b6f6aa16a7606d67fd0fe485ddfdec992d2364c281993522b587c837e4363ca79b32d52b032ccf27083cf8d438378d5012d3db1e9706fb6bab465a3da9e5ebb9cbb1bc832a5b79775b6628ed72ce45af1d34aba76f5cc9a58bfe5309f55deb7a41bf16eda03c796c144c475805a6eb481ee2e74d6a6baab144d3c53ef6f075f624aa736ea66b6956e6c46a1684195b38fa604669dc624325e0c7582030c18f6a43c7a16ef2a8704e23cfd9ecc97e72335c07702fd3868d87da30e6668db7e87fddea5f8f0cad8da479fcdaa8817cffb5b3527f494a0147674746fb89536a8e590e41c9841a4d089ee513d8f0cbf79173951e66a1244dbd9d434fbfa0d63ff049a058de101cf545b811a669b701952e96c356f17f0ee3689f26c2ce6942e8f87af57732b36c5169f30776ceb344a25f00bc401b43fb04172bf5c28688d26a41aa13c45949f1a44666e63f109b6a9fe67c2e1645e40b6f577d73e03f202d5ceac0c1477089eefad9e74cec31cf5a280d314c8b1168977ea410114b402220091e7e390263e5b4b800abb8a227e07b22d212bc392463dc58518756e7e8a6de797a78cf09ef7862ac7c71bdc14a090c71f1e14ede1c97beece6cb32f0cde8fc7b961daab53f12e3fdc42109dcd53e12a50f823cb33fc9c537de23d5997bc6e0f6e4bd9cdbdd6cba5d9cc72370485d11d011d8a54b91e19ca5349bdd07b4bc68d17824bdeb3d0529541a10e69f9f14751c732c4118f20569632df63e747552dab2e533a0c84c260f2f4f586fc355ffda0725ec822b2a099f8f4e69d206e86bf38035e85a07bb862fae491d4dd91560bc069ad9f7d990524336185a95907fdf19bea5ad62c83cfd4478c7447d68661d2e09e617e4261a0223142d9f7f151425f586cfa86421a6249556a5ac4d1a2f8869ad6921421410fafcb023abf212dfc1d666dc9dc478cc4ecf45dfaced8fc56b65141887bd6aa14ed52c42087000cb4f66f7fc339065bbbcd42848fb078a58c39fd7c3b4f091f2a98e8ebf08f4df1bcc3e889b342ca011e6253e8eb4e83fbfffe04c2fef2dd345a9df0d738d8e7b90791ea13a659056aa949a1ce3685bb6e48e2adb14d42c2e1b108ba6ebf441ccf62ccc5d9c4116a0980eb2f71797f3091cf6dfca689896100196375686869f6b4ca95a6850243e5baf4456982e237daaf7b4638503caf6b0a8efd3dd4b8c5d0d79fba0bc504b32c5e9ad4788fe3a010f477174484568f464473be0ad07fe174bd1b8f61684eb8f26e976538d0725064dc868c854978be87f659128ac72ab7ed392f1e2ab477cf5ab6e029f332709eb02ae3a51bcd30ab41a5cc7be26b3438d2cbff2b85fd4d9cf2df48049af139ee4b1d01567642948ceb1de433b78486a4657bc78dcae560cb75477b7518f3a67ab2ccf96ef009b55ad4113ee3e86b5e5acc0e68e695ac4eee91d5ba8465b7f214ed884acfb10828933bcfe697170d82659299fe109c0e8bf896b40ff1e4fd7f5c1270b08c1cbdfc8f4466a6d36911aed316ed00dedb4880574638cbbe3d41da9f6d7b86e897c40f57fd03d4bf98b33fb3b32576095eba9c1b633b5d243fdfe222bfc11ff1813d8915424db4300658f2cbe76521234697be621308a565b200577b16d3bbbb01c031706b92088f5a1f6d92bfeb9cbe90e3ce193a405854f61b9c07494345f088d853f5685fda148b79dbc9a5ae1b7f9075a35c2e1079130756b30bbf339edfcae77c90fe9301794673e92b408d7c5ac371c9d6a64d66399d124957475e0162635dfa810c85f6477753b2c7a8aee95fdcbae6fc0299fe3341e31e375623c5ba281d272598a5c20c49853ff320a17eb94e75422feef69c291ca7befa0b1ed2fc8cd75e9418c04df8ddd58ccd4ece339915cf00c79063c9f9bc546032ce16eb05a1d93a5d8ba1d5bb96751ac259750c71fb3d1d15c2a64c768dce39fb21fb0823baabfd5ffc15441792fe24fff2218de4ca464ef41fc339e3a180d8235cb6d21dc9d02020632d6c1ace1a694d30e16862410403162b60d772113d5748423a32d40fcd933a24c83e9628afe16cdee8fe50b58c8b8053023353a36f19ebbe1dc55f04e605e9a1a1ce84e4873828c8dbc3004818a06efe95f83a4ab9c44d07c61a02a33c2f51cc0060f101c7ca3690777c2b17db2c5437edafea79e8f263f28c53052c0c6628a2cf14e09e761c0c03564e4bb875ba1a04e1aa5cfe83738a1022f8f5fce3012d4cd32a54ada24c2375d3ac9de1eca2d4dc943666eb84503e99473c24a3ca46d5d8cf46b2651bae2d4136fd81b1f0c7cb3345253a73888a084aa345be7924d058e4a83d64830f34cb94200ca43245a493130c062814115b366fa3aea9a2c7d6935bc596a2f55053ef105d94ae664a2767582eeca95ca9bad7c8b6caff26505c0019001f702551f00b6eb843908face8f77681ec7e750ad1a12dfdd9808d3fa1cece08333aab963a0050df400cf7c34918f2460781843b024efb8497c4c079890c0006245359b84b8338a385aae672556a922554570c9dce137ad66804046bd094b412013a6354b297110d0ce47ad06994391ce31c365281db40a13619333406b8ad065bf0d0e7aeb4188d7cbc66c5b9a87bb30dc767f6f9938176350ffadc6eaf59d2dbaeba9e4cf8ed82a619de89c7486ed60288959f53055006f0259ed9156071f5526fbfb27cabaac95d9433bb53bf4f80d1590c410a40ea671c987b90dabc546104e4fea1deaa04a23cc479a38e67f625be53f755822205fc633587a1a8b2082dea821f776b134dd527c53d43661ea66676ad3f5f4c120776dbfd3b8d0be50cba987f7c990ac3c2bae2a4c6dc34c09108ebd5bb83ba96b723fd0adc18e3ad465f60d59bee89323064e6d8c9c390b56dd7783690b0008ebe6a7895777aac7932d1bb7c07ee09adfc78261d908fec2497e865a5a97c4070b4d76d10cb80ba0a3608a0c7a36e7a4ab703a17e32d4a2054da640a5aa9535b67a328f20f8961785a8dba40e8f312c8a0bfea24deb2631a59c08bc5496ac013e8541", 0xfa4) [ 77.075340] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 77.084982] device lo entered promiscuous mode 2018/04/21 02:18:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000a68000)=""/240, &(0x7f0000ca5ffc)=0xf0) 2018/04/21 02:18:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x20) write$vnet(r1, &(0x7f00005fdf98)={0x1, {&(0x7f0000bcd000)=""/4096, 0x1000, &(0x7f00002e7000)=""/216}}, 0x68) 2018/04/21 02:18:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000380)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffff, 0x7}}, 0x18) 2018/04/21 02:18:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0x81) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/04/21 02:18:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8) 2018/04/21 02:18:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x1c, 0x1, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:18:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8001, 0x80000001, 0x5, 0x2, 0x0, 0x7, 0x90000, 0x4, 0x80, 0x7, 0x4, 0x5, 0xff7, 0x0, 0x3ff, 0x4, 0x4, 0x6c7, 0x2, 0xfff, 0x0, 0x7ff, 0x4f, 0x0, 0x400, 0x7c, 0x5, 0x1, 0x7, 0xfbb8, 0xfffffffffffffff7, 0x8247, 0x101, 0x80000000, 0x3, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x81, 0x100000001}, 0x0, 0x2, 0x7c, 0x1, 0x4, 0x3f}, r2, 0xf, r1, 0x8) write(r0, &(0x7f0000000080)="1f00000010000900040000000000e7fb0300000408000200000004ad06ffef", 0x1f) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5bfd, 0xa00) r3 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x0, 0x0, 0x2}) 2018/04/21 02:18:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="bb4b4a743a37e42c4c8c23661e4eab6e8cdaac186f263fad", 0x18}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:18:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)="a7118230eef5e420406dc6a099da077d64", 0x11}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 77.346935] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 77.371886] device lo left promiscuous mode 2018/04/21 02:18:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8) [ 77.404692] device lo entered promiscuous mode 2018/04/21 02:18:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000005980)=0xc) 2018/04/21 02:18:48 executing program 6: syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) inotify_init() epoll_create1(0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000080)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000000040), &(0x7f0000000100)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:18:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x2, 0x8001}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x3}) 2018/04/21 02:18:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000a68000)=""/240, &(0x7f0000ca5ffc)=0xf0) 2018/04/21 02:18:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0x81) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/04/21 02:18:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000005980)=0xc) [ 77.671543] device lo left promiscuous mode [ 77.734304] device lo entered promiscuous mode 2018/04/21 02:18:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x2}, 0x4) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/21 02:18:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x2, 0x8001}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x3}) 2018/04/21 02:18:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x20) write$vnet(r1, &(0x7f00005fdf98)={0x1, {&(0x7f0000bcd000)=""/4096, 0x1000, &(0x7f00002e7000)=""/216}}, 0x68) 2018/04/21 02:18:49 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='$\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xfffe) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) mq_unlink(&(0x7f0000000000)='\x00') 2018/04/21 02:18:49 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x30) 2018/04/21 02:18:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000a68000)=""/240, &(0x7f0000ca5ffc)=0xf0) 2018/04/21 02:18:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000005980)=0xc) 2018/04/21 02:18:49 executing program 7: setrlimit(0x2, &(0x7f00000ef000)={0x0, 0x8000000000000000}) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/21 02:18:49 executing program 0: r0 = semget$private(0x0, 0x20000000103, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r0, &(0x7f0000033816)=[{}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/04/21 02:18:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x2}, 0x4) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/21 02:18:49 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/21 02:18:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x2, 0x8001}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x3}) 2018/04/21 02:18:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000005980)=0xc) 2018/04/21 02:18:49 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000000f68)={0x0, @in6={{0xa, 0x4e20}}, 0x0, 0x9}, 0x98) 2018/04/21 02:18:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000a68000)=""/240, &(0x7f0000ca5ffc)=0xf0) 2018/04/21 02:18:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) write$fuse(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a80)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:18:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x2}, 0x4) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/21 02:18:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x20) write$vnet(r1, &(0x7f00005fdf98)={0x1, {&(0x7f0000bcd000)=""/4096, 0x1000, &(0x7f00002e7000)=""/216}}, 0x68) 2018/04/21 02:18:49 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x9}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xc, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000777000), &(0x7f0000ef0f88)=""/120}, 0x18) 2018/04/21 02:18:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x2, 0x8001}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x3}) 2018/04/21 02:18:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x2}, 0x4) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/21 02:18:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) write$fuse(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a80)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:18:49 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={0x80000}, &(0x7f0000000180)={0x0, 0x7530}) 2018/04/21 02:18:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x20) write$vnet(r1, &(0x7f00005fdf98)={0x1, {&(0x7f0000bcd000)=""/4096, 0x1000, &(0x7f00002e7000)=""/216}}, 0x68) 2018/04/21 02:18:50 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)=0xa5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r2, &(0x7f000000a000)=[{&(0x7f0000000080)='+0', 0x2}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x7, 0x4) r3 = semget$private(0x0, 0x0, 0x112) semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000180)=""/97) unshare(0x20100) 2018/04/21 02:18:50 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2000000000227e, &(0x7f0000000000)) 2018/04/21 02:18:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) write$fuse(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a80)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:18:50 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2000000000227e, &(0x7f0000000000)) 2018/04/21 02:18:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) write$fuse(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a80)={"8a927799b01a029f25061eda96dd379385fc78b28fcbf8eb8455a6fb67a8de46d4d40000a01a47191dc792f414ac8437036bb34b6632c980073c4cdc084a1966c440f15811d016f5b50e90810603f10a2c83eb8c062194269ab67e4bb4b3c5199cadd60d3f6fc72a7eb011b622072532229fbc9d9c4d1e045191ee2b0d584c8fd736ee3e7d73d5267b67a69251b101000000692d30ecfb80632608000a7a24aa58b111193c88181907d958cb00807d63dfb58775215937ae2b62b46c6d5816f2fc52eeab0000000000000003252929e628ad2c34a0ef717fb2504d9bd66eabce002faf0512145c072f3087a5566c38fda729442c3ebd62e970a9a3eb242747993601a1a186b8376d39c69c4ce503cf638feeae79436a3c00000000000000380fa7b4c9c2d674b80ef220109f8fa8200de4794547b4da6430ac512116d358949a298812c5d54017aa2fc8b814ecf28c41d4c83474ba93a8ad32b16371b42359bf984abb465228cfd848e54abc383d21d0a3315f1b8599efa1bf10bd30a1371757b13aed4a19db7c777995fd42ad446d9d2755f8552563c7639ce00da8ee3ece9ded52625aa3f0a1d7b76b32536d39eeae1582710632a79bddf1032b6e6ac794f37ec9d0c3b44923cc7b631c6df64f28d75d99443d665bdb3c6b7961190e8f82a233000001002ce4f47168ef93f01aef51c60000000000000006af34b21ed8437a371c0b427cd8c95f3952ee752b758ea9fa443debf5a2d7cdbaf1a2a23d68cb0886925599fbc1361b8ce27b41d79027894b6c0003cc97a64088edf383a51eef947915369bdd4fc3cced2663d17515838f8fa1a284c5b6ffc5251019eaee59d117d34c73e50fbd33ceb4508cfa0100000000000000114a13542dee77b2651783f6a5d9260036ccc70d695101d1ddb56f1ac26584547d8d5cecb3c672068cc7ab31ddc5ae0a253b587d712c6110acdf49fa0100de0f7b3717280d35b7e70733538a8eec8fb17616d2198d02ba4e7690fab7933b676deddb27755d6a8f29c643dfff0e4bd7c2b13b7a57a3120cb2cbb70200339dc0862dafad481a63e5f90d14c54803d8b100e0ad5cae9a0a7b2f329c3b0000000000000002f4b2eebf781ec7ed16d988d46575a31f81121c13c7cb674ff41cb3c7f6896d41e86bda845164825e28b9fb719e695a9eb9710f924aefde1c96bebe4274594038347691a088f90400000000000000fc24388cc15dffeda1bd610582c5b74fa6c6e789ce440f71871a5e8b85000000005806743e8e075b8624686feb21dbdb9afd74dd0067d82a72c099a2d52a599494388cb56cdb5ef9190980f9128e689e07e98b2ed59e1537fc7de144dc2030374b0f5fcfd8f2ef242803f7bcbc07145f65b8912a4a335b858de8acf080852c49d353a00a5aac3d6a33e0075506a1fd25799f1637b1bafaf09954ef"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000012e30)={0x14, 0x16, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {0x4000a}}, 0x14}, 0x1}, 0x0) 2018/04/21 02:18:50 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2000000000227e, &(0x7f0000000000)) 2018/04/21 02:18:50 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2000000000227e, &(0x7f0000000000)) 2018/04/21 02:18:50 executing program 0: r0 = socket$inet6(0x10, 0x4040000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000000000)="5500000018007fb1b72d1cb2a4a280a80a06050000a84302a7052369250009001800001c010000000600050002000000000000dc1338d544000a9b84226eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/21 02:18:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="de", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) 2018/04/21 02:18:50 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x1, {{0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) [ 78.994278] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/21 02:18:50 executing program 0: mmap(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ad4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002000), &(0x7f0000ad4000)=0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x14, &(0x7f0000002000), &(0x7f0000ad3ffd)=0x4) 2018/04/21 02:18:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) getdents64(r0, &(0x7f0000000df0)=""/528, 0xff95) 2018/04/21 02:18:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:18:50 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x400000, 0x0) sendto$ax25(r1, &(0x7f0000000340)="e56032f95d6752fccd7d8972392696b68f1d5daa113ab3b6c8ec8d5629b2de6fc43972b94b1ffb7fff34d2702adeaf8432f303edc500435f182a60d26165bd4e26d0a36aa3596fe3e5d7dfe91400ea3b7858acb801df4c886509115fb03e4a7190fd366cab17aebabad09481c00910e206c376bf295f9b26f95064a96a15a1b80dbb4ed7821d5f730dbf8489b8b0a331f2b05ade3653429330f2b61719", 0x9d, 0x4000, &(0x7f0000000400)={0x3, {"32714fc92d7caa"}, 0x7fffffff}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000300)=0x7, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000aaa50e280f976bde00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @dev}, &(0x7f0000000480)=0xc) 2018/04/21 02:18:50 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) ppoll(&(0x7f0000053ff8)=[{r0}], 0x1, &(0x7f0000048000)={0x77359400}, &(0x7f0000052000), 0x8) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x40, 0x30000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xb9, "592be928cccb112701bd70bc5c8234ab923c3d1e06f5ac5a2f50492a2c1f2b048cb11864b7eee0082a2bc28ab25caefd7b8d39c3ce3a01a20d931807ea5f64a74311af7cc42c7113582e0162e1d44c2243a51bc884f99cbf219a31bda53c1aef26af39b930e944bd5977da5f10f15113d003c579ce0952de5e6a342c08ff81c7f0247e4c65b1f0474c086aeb8b10b46848f0494361939c4b1ea170329319b06cc18d36536fb3a17209edf43078a437ec130fe73e8d3af47858"}, &(0x7f0000000340)=0xc1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380)=r2, 0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x7f, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000000c0)={{0x2, 0x7, 0x1, 0x20, "12c2e3c2dc45d2f733b942c74f00167887856796d3a0d33c8dee07f3505f2dce8bd8d9b343b1b71ed6d252f8", 0x90}, 0x0, 0x0, 0xc, r3, 0x6, 0x1000, "a29d184f530da5f5b7ebeca713cb401de2ee381bfc2dd9fd1154ab43e2f6c4ed6fff86b8bd8cafca2f3fe61a34f112dd7336a61e1a3cee420866ddc798efd479", &(0x7f0000000080)='vboxnet1md5sum\x00', 0xf, [], [0x6, 0x7, 0x8, 0x9]}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000018ff8), 0x8) signalfd4(r4, &(0x7f000004c000), 0x8, 0x0) 2018/04/21 02:18:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xb9, 0x10, 0xff, 0x7ff}, &(0x7f0000000180)=0xb) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0xfffffffffffffff9, 0x0, &(0x7f00000002c0)}) 2018/04/21 02:18:50 executing program 3: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x4ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abcfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) 2018/04/21 02:18:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000240)={0x0, @time={0x0, 0x989680}}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) 2018/04/21 02:18:50 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000f44000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) listen(r0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000500)='/dev/dmmidi#\x00', 0x8, 0x800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000a9a90000000000000000"], &(0x7f0000000580)=0xe) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000005c0)={0x7fff, 0x2, 0x8, 0x0, 0xfffffffffffffffb, 0x8001, 0x9, 0x180, r2}, &(0x7f0000000600)=0xfffffffffffffe52) connect(r0, &(0x7f0000000000)=@llc={0x1a, 0x103, 0x3, 0x19, 0x0, 0x10000}, 0x80) 2018/04/21 02:18:50 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d630000076304400200000003630840"], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/21 02:18:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000202ffd)='ns\x00') execveat(r0, &(0x7f000000b000)='./file0\x00', &(0x7f0000000040), &(0x7f000000b000)=[&(0x7f000000b000)='net/igmp\x00'], 0x0) 2018/04/21 02:18:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) mprotect(&(0x7f0000a98000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a98000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) [ 79.610363] binder: 6869:6871 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 79.621708] binder: 6869:6871 BC_FREE_BUFFER u0000000000000000 no match 2018/04/21 02:18:50 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d630000076304400200000003630840"], 0x0, 0x0, &(0x7f00000002c0)}) [ 79.708702] binder: 6883:6884 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 79.747910] binder: 6883:6884 BC_FREE_BUFFER u0000000000000000 no match 2018/04/21 02:18:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000001600)={0x28, 0x22, 0x109, 0x0, 0x0, {0x4}, [@typed={0x14, 0x16, @ipv6=@loopback={0x0, 0x1}}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:18:51 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f00000004c0)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) 2018/04/21 02:18:51 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x70bd29, 0x0, [@sadb_spirange={0x2, 0x10}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/21 02:18:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)) 2018/04/21 02:18:51 executing program 3: io_setup(0x7c5, &(0x7f0000688000)=0x0) r1 = syz_fuseblk_mount(&(0x7f0000c41ff8)='./file0\x00', &(0x7f00004d2000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000167000)=[&(0x7f00002d7fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000191000)}]) 2018/04/21 02:18:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000005c0)=r3, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000ce0000007cc1679bc7de64ff6515d7a948f3d337e4b681b75cafbb1eaae5a445f9dc99bb69daaaf8927ec42d52302b8f062e9cb0670f349902911cbc9a8ab04d81ca1ae0014aadd3aaed754400cfdd4daf66920add48b4917b0981153afd8f5d805d60967e755c08bad668d866ee6a5c3a8f0de40f781f6b54401062f3a8e582c37e6070d4665fde36f8d25cc6db2a80b3178ab2ae1aaec2fd3158d9ad4f4118bc6d9b9bc61285acb1d2c784682e09cb324f577a848a342a0cba03797d1b2e657db9adf296d66fdef9b10d55b3fafd9a095f"], &(0x7f0000000300)=0x1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x3) r4 = getgid() ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x1f9e) stat(&(0x7f0000001240)='./file1\x00', &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) sendto$inet6(r1, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000007c0)=0xe8) sendmsg$can_bcm(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x1d, r6}, 0x10, &(0x7f00000008c0)={&(0x7f0000000840)={0x7, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "53b6e17c0a867195c7a6a66ef9790ed5765e9dcdb5196a00b38abec756fe8fb3a2555bf9af9b5ba27b3a28a03f3666f85a964dbb68ba22f4afb29326cde7ebb2"}}, 0x80}, 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) r7 = syz_open_procfs(0x0, &(0x7f0000002f80)='map_files\x00') r8 = open(&(0x7f0000ea9ff8)='./file0\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x26340a92, 0x7, 0x3f, 0xffffffff7fffffff, 0x6}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000440)={r9, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x9, 0x3d}, &(0x7f0000000500)=0x88) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000001440)=0x3, 0x1a) ftruncate(r8, 0x27ffe) recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000140)=@ipx, 0x80, &(0x7f0000002580), 0x8, &(0x7f0000002600)=""/31, 0x1f}}, {{&(0x7f0000002640)=@can, 0x80, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/195, 0xc3}], 0x3, &(0x7f0000002a00)=""/67, 0x43}}, {{&(0x7f0000006800)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)=""/93, 0x5d}, {&(0x7f0000002b80)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/32, 0x20}, {&(0x7f0000002d00)=""/241, 0xf1}, {&(0x7f0000002e00)=""/31, 0x1f}, {&(0x7f0000002e40)=""/220, 0xdc}], 0x6, &(0x7f0000002fc0)=""/173, 0xad, 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003080)=""/164, 0xa4}, {&(0x7f0000003140)=""/12, 0xc}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x3}, 0x9}, {{&(0x7f00000041c0)=@rc, 0x80, &(0x7f0000006480)=[{&(0x7f0000004240)=""/3}, {&(0x7f0000006740)=""/176, 0xb0}, {&(0x7f0000004340)=""/205, 0xcd}, {&(0x7f0000004440)=""/52, 0x34}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x200002cf, &(0x7f0000006500)=""/9, 0x9}}], 0x5, 0x0, &(0x7f0000006680)={0x77359400}) sendfile(r2, r8, &(0x7f000053cffc), 0x8080000001) 2018/04/21 02:18:51 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d630000076304400200000003630840"], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/21 02:18:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sched_setattr(0x0, &(0x7f0000000080), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xfffffff0}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) [ 80.184200] binder: 6902:6903 DecRefs 0 refcount change on invalid ref 2 ret -22 2018/04/21 02:18:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f000096b000), 0x0) 2018/04/21 02:18:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f0000447ff0)=[{&(0x7f00008889ff)="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", 0x601}], 0x1) 2018/04/21 02:18:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 2018/04/21 02:18:51 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000000000)) [ 80.226897] binder: 6902:6903 BC_FREE_BUFFER u0000000000000000 no match 2018/04/21 02:18:51 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d630000076304400200000003630840"], 0x0, 0x0, &(0x7f00000002c0)}) [ 80.351914] binder: 6937:6938 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 80.380538] binder: 6937:6938 BC_FREE_BUFFER u0000000000000000 no match 2018/04/21 02:18:52 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x3, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/04/21 02:18:52 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000540)={{0x84, @rand_addr, 0x0, 0x0, 'sh\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) 2018/04/21 02:18:52 executing program 1: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x4b7, 0x0, 0xfffffffffffffffc}, 0x4) 2018/04/21 02:18:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000280)={0x0, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x3, 0x0, [{0x5000, 0xfc, &(0x7f0000000000)=""/252}, {0x1000, 0x4f, &(0x7f0000000100)=""/79}, {0xf000, 0x74, &(0x7f00000001c0)=""/116}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/04/21 02:18:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:18:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f0000447ff0)=[{&(0x7f00008889ff)="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", 0x601}], 0x1) 2018/04/21 02:18:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/218, &(0x7f0000000000)=0xda) 2018/04/21 02:18:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000969ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae08, 0x0) 2018/04/21 02:18:52 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2802}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) 2018/04/21 02:18:52 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x80, &(0x7f0000ca3000)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f00008e3f35)=""/203, 0xcb}, {&(0x7f0000cd5ffe)=""/2, 0x2}], 0x1361, &(0x7f0000a01f13)=""/237, 0xed}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x6, 0x1, 0x0, 0x40}], {0x95}}, &(0x7f00000002c0)="03000000", 0x41, 0x2df, &(0x7f0000000140)=""/251}, 0x2a) 2018/04/21 02:18:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000000)={0xe2, &(0x7f0000000100)=""/226}) writev(r0, &(0x7f0000000000), 0x1000000000000075) 2018/04/21 02:18:52 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000540)={{0x84, @rand_addr, 0x0, 0x0, 'sh\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) 2018/04/21 02:18:52 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000640)=""/212) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) fcntl$setlease(r1, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x208, 0xfffffffffffffffb, 0x9, r5}, &(0x7f0000000280)=0x10) pwrite64(r4, &(0x7f0000008040), 0x0, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x401) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) fallocate(r6, 0x1, 0x3f, 0x3) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) r8 = getpgrp(r7) ioprio_set$pid(0x1, r8, 0x9) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="030b", 0x2, 0xfffffffffffffffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getgroups(0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0]) keyctl$chown(0x4, r9, 0x0, 0x0) getuid() getsockopt$ax25_buf(r4, 0x101, 0x0, &(0x7f00000005c0)=""/125, &(0x7f0000000340)=0x7d) signalfd(r2, &(0x7f00000002c0)={0x4}, 0x8) sysfs$3(0x3) truncate(&(0x7f0000000400)='./file0\x00', 0x7) close(r4) 2018/04/21 02:18:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/218, &(0x7f0000000000)=0xda) 2018/04/21 02:18:52 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f0000145000), 0x53) 2018/04/21 02:18:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f0000447ff0)=[{&(0x7f00008889ff)="b6b23ebe2094b6c296b7f43c2ff9cec9a414ac8ab00820fbde9a0f4a1bd2773a23ca881cb2b8f6f7676ec3e23411c9a7b90c0d98413505ae48a6f9680b3b1c7d9d2083981adb57cc49d7c44eb888269d5ddad8a8ece4937a8c1bd5f6d54eb2fee4344a60a71f21a02b71241caa5bfb30ef20735987815557dd0712275e1cab0562f6e71d00f07d832fff291844ad8c73a6b27652f46020e42eebd5fd185751187d8455017d6e42c6492f282d3fcea50ef7e26862684165a175a262d5fdb1562a9dd53028ed11564d449b40c3dc6e1500aff5eb7c7ac29b27bcac0249c746425160e164ce64e5180f5b19b180bfa5a14ff6d6bac621a1723ffe9dbd05f91bed6ffd9ba2ca0ea7f3eca738786c6cf9be08976ab48f5ce579d5053ef537ba15f9ca286ef7299567bf2b50512cba39ca22e4eafa46593dfb19b29e524a5e0b527f23c3fd666357e9b397f2e720146853c8a4e590b620fd4f0c83a6a0d626fbc2d018596b5bd8b2b9496d3a83f8760b1fb0a6ec9de29b146334717e8cab34996e8474bbde59447f2cc876096f80b10134ed5d69027a9cdd109de0d161003880d10536725ab38afdff82208b8ca05f7661bc482b841d815c35660d7f7b036d0426f3cbfcd1448782af41483936f20b09e239d53be9df805d1a4dced5167eb9b8c8c681451329adcea047a3a00461916692c523647ed2b81b39080417072cf26db77335331fd9d49b1bea2ba448e3e7822109d5a115c5da661c65193ae60923e37b8751d7f6eb2511fc9b55963fca553c0c6d065240b94c889af1781a8671ce4ec91744820d8c3905b2eafb38d909b45175801885e1a1059a9b3db85a95f2172947697e56244fd7b4b412a33b9adc061fca8c742d05f50ce0d2b4280749ce13488259d37074ba94540a5b9cdf426fdf4563163e81c9769b7a84db101c03d88cec1eb18b7ded9b957734dde7b896b0b9c1a76e63104a02a06e917a0e3b608276ad2860a17c76e5c5a07dd6917fa497adc8ff56e2ec6f2bcc09d8061f504c5d5128b4e89bcb2207df70db9d7cceff2fc266443b6d34bb651d0def84768f750279e8b8ab42a8ba7f4f265e0051333f346bc113c56b179b81421601bd60cd071ee198d84ca6abd13eb3ecbc6aaab47aaae592f97c3747c37266e8ad2358029989919b7f5dcee8b60e1d32a0a94d91cc073174ef180d1b3cd4aedb77f1e898f6df02cf3fe57db328abb0ac8d88e5f0d3015f10e74f00e90ab3acbd2e8917e130d2961b1895b5e3252e8a74a0fe0579330407de6a6644cdb7cef78f6ebdf9ef2aa07b32c587d93be72cce852d1ccdf83d1740e0b5c2971b340d98e584b883878ebcac7c91c0c7ce6c23b459b8feb49133d78e965ece4c3f5e11f929d5ef541e2ad8311c4c7412c045b4abf9d14e0f8fd1fd5f851511519e45bee4f00ebb6fddcf38b0936c7aaec7e846631d8f0f0f032fd578dba501d6c7c63bdc858c6c80cc37ac3992b4dec23d5c2304f15849f696bf1327c3d2ad87908a529bcd398b40c1323462ae597ac24b707041063050c35c632af02461a3c14cbb6f2a573aa4c154bebe75e8e8254c2df4106fcac6a295317cde6123d9148693790211cc12a7c3cbfaf7e5da983827f7d430c4a858842057ac860fa3891fe7f59c71b7256618198ceb0253d0f6afe9515af1d3a97a69f5d3f8def2f0b2dd0cbaddedc76ac3e57763ea544187493419bb6b0cc14df727f3006395db760806edcdc37804870ee006fe60471f10f0313fc1f9f365038472cf978d091e94338af5dc37e12e30d4e16b13675eea7d36a18f3e39db3619cdf573058e89f95702cf8bf8ca88b4f4989e4a7086a682a13b477d4cac8bdb595c1eeb2463e57538e896ca3168292cdcf7779a43f4113bdbab6d78aa986ac2766bb55a40f0f59aa7eac6af7db18e7e308ba6df385fdd13a8cfa44b7bcc0b9688588bd80089298088ae533de7af3627718726709d4f5d773a6f80c058d22ceece37bd5b3e76e089de57cf80ea6a3b1972cbb086b9e03d228f0057089e04baa357cfb3a9e5941c7643e903ca252509cc4b9a6202ecb3faae31d6309135668d9a55f3a8d64b65496429d74a1d236f17c9f0d60f0924f1fab0f40bbde913fc4eeda486145a39026725897734fff68ff083d3c07e61f937093be31b0cc6dc", 0x601}], 0x1) 2018/04/21 02:18:53 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000540)={{0x84, @rand_addr, 0x0, 0x0, 'sh\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) 2018/04/21 02:18:53 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955ce83b632ad4049739030d61b6f37e405db505735e"}}}}}, &(0x7f0000ea3000)) 2018/04/21 02:18:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b050900030000000000000058", 0x1f}], 0x1) 2018/04/21 02:18:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/218, &(0x7f0000000000)=0xda) 2018/04/21 02:18:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f0000447ff0)=[{&(0x7f00008889ff)="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", 0x601}], 0x1) 2018/04/21 02:18:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@random="875db04ddf52", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/21 02:18:53 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000640)=""/212) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) fcntl$setlease(r1, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x208, 0xfffffffffffffffb, 0x9, r5}, &(0x7f0000000280)=0x10) pwrite64(r4, &(0x7f0000008040), 0x0, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x401) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) fallocate(r6, 0x1, 0x3f, 0x3) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) r8 = getpgrp(r7) ioprio_set$pid(0x1, r8, 0x9) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="030b", 0x2, 0xfffffffffffffffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getgroups(0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0]) keyctl$chown(0x4, r9, 0x0, 0x0) getuid() getsockopt$ax25_buf(r4, 0x101, 0x0, &(0x7f00000005c0)=""/125, &(0x7f0000000340)=0x7d) signalfd(r2, &(0x7f00000002c0)={0x4}, 0x8) sysfs$3(0x3) truncate(&(0x7f0000000400)='./file0\x00', 0x7) close(r4) 2018/04/21 02:18:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006f18)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000002ffc)=0xe8) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000002ffc), &(0x7f0000004ffc)=0x4) [ 82.329651] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 82.351499] sit: non-ECT from 0.0.0.0 with TOS=0x2 2018/04/21 02:18:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/218, &(0x7f0000000000)=0xda) 2018/04/21 02:18:53 executing program 4: r0 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) write(r0, &(0x7f0000000000)="15", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004ff4)={&(0x7f0000001000)='./file0/file0\x00'}, 0xc) 2018/04/21 02:18:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) sendmsg$alg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="aa1e8a081a715cf3196bef4d6c5359eea6e866c5c30431e9d555d9d1b557367392", 0x21}], 0x1}, 0x0) 2018/04/21 02:18:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000da6feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000501feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r0) 2018/04/21 02:18:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b050900030000000000000058", 0x1f}], 0x1) 2018/04/21 02:18:53 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000540)={{0x84, @rand_addr, 0x0, 0x0, 'sh\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) 2018/04/21 02:18:53 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000640)=""/212) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) fcntl$setlease(r1, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x208, 0xfffffffffffffffb, 0x9, r5}, &(0x7f0000000280)=0x10) pwrite64(r4, &(0x7f0000008040), 0x0, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x401) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) fallocate(r6, 0x1, 0x3f, 0x3) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) r8 = getpgrp(r7) ioprio_set$pid(0x1, r8, 0x9) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="030b", 0x2, 0xfffffffffffffffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getgroups(0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0]) keyctl$chown(0x4, r9, 0x0, 0x0) getuid() getsockopt$ax25_buf(r4, 0x101, 0x0, &(0x7f00000005c0)=""/125, &(0x7f0000000340)=0x7d) signalfd(r2, &(0x7f00000002c0)={0x4}, 0x8) sysfs$3(0x3) truncate(&(0x7f0000000400)='./file0\x00', 0x7) close(r4) 2018/04/21 02:18:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771d39076c63413ac4c3797871c905a3788788903cb54e0b814d561537a2e51405ff0b5bbcb5fe7f41a21b44db2d47be29e7e805a6d3d2a98cea5945db9b758fad872a60d0c8531afe1dbf4d5962f155c685eb8975a7feafedf838264a64caf9ed61617b79b77d069e76fd54e623a555cba8ba8ca09edd10a35df95900f9d33c0a1432915befb630f3817870dd103772719", 0xb0}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:18:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) mprotect(&(0x7f0000a98000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 02:18:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) dup2(r1, r0) 2018/04/21 02:18:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 2018/04/21 02:18:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b050900030000000000000058", 0x1f}], 0x1) 2018/04/21 02:18:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x4001000000001000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/67) 2018/04/21 02:18:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000019ff4)) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000000)={0xd0000, 0x0, [0x5, 0xfffffffffffffffe, 0x4, 0x8000, 0x4, 0x2, 0x6d4, 0x6]}) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000ce6000)) 2018/04/21 02:18:54 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) 2018/04/21 02:18:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/252, 0xfc}}], 0x1, 0x0, 0x0) 2018/04/21 02:18:54 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000640)=""/212) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) fcntl$setlease(r1, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x208, 0xfffffffffffffffb, 0x9, r5}, &(0x7f0000000280)=0x10) pwrite64(r4, &(0x7f0000008040), 0x0, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x401) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) fallocate(r6, 0x1, 0x3f, 0x3) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) r8 = getpgrp(r7) ioprio_set$pid(0x1, r8, 0x9) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="030b", 0x2, 0xfffffffffffffffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getgroups(0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0]) keyctl$chown(0x4, r9, 0x0, 0x0) getuid() getsockopt$ax25_buf(r4, 0x101, 0x0, &(0x7f00000005c0)=""/125, &(0x7f0000000340)=0x7d) signalfd(r2, &(0x7f00000002c0)={0x4}, 0x8) sysfs$3(0x3) truncate(&(0x7f0000000400)='./file0\x00', 0x7) close(r4) 2018/04/21 02:18:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 2018/04/21 02:18:54 executing program 7: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) remap_file_pages(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/04/21 02:18:54 executing program 1: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b050900030000000000000058", 0x1f}], 0x1) 2018/04/21 02:18:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000a7c000)=0x2, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) 2018/04/21 02:18:54 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000af0000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 2018/04/21 02:18:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) [ 83.048244] mmap: syz-executor7 (7118) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/04/21 02:18:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000700000)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/37) 2018/04/21 02:18:54 executing program 1: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:54 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x77d50800, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 02:18:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="0b0a97f68394"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @random="236147cc95f2"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r0) 2018/04/21 02:18:54 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x7ffd) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000), 0x8) 2018/04/21 02:18:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 2018/04/21 02:18:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002f80)="af92b02946cc7574aa8e5ab7acc3d6614713177f7e6614cd1850335982678891076a6d4b8a9ae62d7acf0f532e1dc8d86a6d34481b18bd8fe329a76a09a9f823624e7c16ef2b3dfb35df9616d02b35bdb595e7e3ef4e61b58f11c6cd9dbc08e1e5385563d9b9533ae1ec48358eeb1dd501d4d277fcb303939409375bf5ea39e0c12b74be4a24ed973479c4161a4efc9d6ecfd3f166348be648c823021eedd76b1d76a3fa0feade8d15abecf40310810d5eba77d8246a2f1b4f683398be40c79dcd8701b0bd93209d", 0xc8}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) 2018/04/21 02:18:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0xff42) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r2, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200a84b3f2df893ef000026ff0000000000000000000001fc0f7ccea078786e0ba40d"], 0x23}, 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffd84, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) 2018/04/21 02:18:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002fe8)={0xaa}) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/59, 0x3b}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000013000/0xe000)=nil, 0xe000}, 0x1}) pselect6(0x40, &(0x7f0000011fc0), &(0x7f0000011000), &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000001ff8)={&(0x7f0000012000), 0x8}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 83.316079] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 [ 83.317766] device bridge0 entered promiscuous mode [ 83.344685] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 2018/04/21 02:18:54 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:54 executing program 1: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e100", 0x88, r1) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="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", 0x101, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) [ 83.372848] device bridge0 left promiscuous mode 2018/04/21 02:18:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00002a6ff7)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) 2018/04/21 02:18:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001580)="f4859b4bb55d0d65f93e5cf965c73a2ac1100bb326e51270e92ef1bbaa3fb2b90c53ad606e1023719ab11babfbb786521d15ab48d3771792c6866964a0597634c3398e0a786f706415e4eea7e037c410b43a97a998a7a43450933e8120ec36ee90e41ac7c0661433fe9a97ea6c03d35d421455f8099e2cdf9acf16ef862c6ae70cacd4b2b454a6b6af7d212333254d965deb6c14d78a762151493f65a3fe3b5b7a3952573d375509259b05ade815a69ad6b904af79fc6b1c6efbb4c0eb0240a88f8675f8020ec263a2c6681d5f25dcf4", 0xd0}], 0x1, &(0x7f0000000200)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 83.422948] device bridge0 entered promiscuous mode 2018/04/21 02:18:54 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:54 executing program 1: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2}, {0xb101, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @multicast1=0xe0000001}, 0x800bf}) [ 83.564773] device bridge0 left promiscuous mode [ 84.144768] FAULT_FLAG_ALLOW_RETRY missing 30 [ 84.149546] CPU: 0 PID: 7211 Comm: syz-executor6 Not tainted 4.17.0-rc1+ #10 [ 84.156728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.166062] Call Trace: [ 84.168638] dump_stack+0x1b9/0x294 [ 84.172252] ? dump_stack_print_info.cold.2+0x52/0x52 [ 84.177435] ? kasan_check_write+0x14/0x20 [ 84.181662] ? do_raw_spin_lock+0xc1/0x200 [ 84.185890] handle_userfault.cold.32+0x44/0x5a [ 84.190547] ? handle_userfault+0x16c6/0x2760 [ 84.195048] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 84.199617] ? debug_check_no_locks_freed+0x310/0x310 [ 84.204796] ? __schedule+0x809/0x1e30 [ 84.208671] ? print_usage_bug+0xc0/0xc0 [ 84.212805] ? print_usage_bug+0xc0/0xc0 [ 84.216850] ? __sched_text_start+0x8/0x8 [ 84.220980] ? plist_check_list+0x7e/0xa0 [ 84.225112] ? perf_trace_lock+0xd6/0x900 [ 84.229245] ? graph_lock+0x170/0x170 [ 84.233033] ? plist_check_list+0xa0/0xa0 [ 84.237171] ? zap_class+0x720/0x720 [ 84.240872] ? __lock_acquire+0x7f5/0x5140 [ 84.245088] ? graph_lock+0x170/0x170 [ 84.248887] ? find_held_lock+0x36/0x1c0 [ 84.252943] ? lock_downgrade+0x8e0/0x8e0 [ 84.257080] ? kasan_check_read+0x11/0x20 [ 84.261210] ? do_raw_spin_unlock+0x9e/0x2e0 [ 84.265608] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 84.270178] ? kasan_check_write+0x14/0x20 [ 84.274400] ? do_raw_spin_lock+0xc1/0x200 [ 84.278626] __handle_mm_fault+0x38d8/0x4310 [ 84.283035] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 84.287775] ? graph_lock+0x170/0x170 [ 84.291558] ? futex_wake+0x750/0x750 [ 84.295343] ? find_held_lock+0x36/0x1c0 [ 84.299394] ? lock_downgrade+0x8e0/0x8e0 [ 84.303536] ? handle_mm_fault+0x8c0/0xc70 [ 84.307762] handle_mm_fault+0x53a/0xc70 [ 84.311810] ? __handle_mm_fault+0x4310/0x4310 [ 84.316381] ? find_vma+0x34/0x190 [ 84.319910] __do_page_fault+0x60b/0xe40 [ 84.323959] ? mm_fault_error+0x380/0x380 [ 84.328088] ? lock_acquire+0x1dc/0x520 [ 84.332051] ? graph_lock+0x170/0x170 [ 84.335840] do_page_fault+0xee/0x8a7 [ 84.339625] ? exit_robust_list+0x290/0x290 [ 84.343928] ? vmalloc_sync_all+0x30/0x30 [ 84.348063] ? find_held_lock+0x36/0x1c0 [ 84.352119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.356949] page_fault+0x1e/0x30 [ 84.360395] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 84.365995] RSP: 0018:ffff880190dd7b68 EFLAGS: 00010202 [ 84.371352] RAX: ffffed00321baf7d RBX: 0000000000000010 RCX: 0000000000000002 [ 84.378603] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880190dd7bd8 [ 84.385856] RBP: ffff880190dd7ba0 R08: ffffed00321baf7d R09: ffffed00321baf7b [ 84.393106] R10: ffffed00321baf7c R11: ffff880190dd7be7 R12: 0000000020013010 [ 84.400355] R13: 0000000020013000 R14: ffff880190dd7bd8 R15: 00007ffffffff000 [ 84.407623] ? _copy_from_user+0x10d/0x150 [ 84.411845] get_timespec64+0x75/0x180 [ 84.415714] ? timespec_trunc+0x170/0x170 [ 84.419846] ? lock_downgrade+0x8e0/0x8e0 [ 84.423979] ? handle_mm_fault+0x8c0/0xc70 [ 84.428200] do_pselect+0xd3/0x4d0 [ 84.431725] ? kern_select+0x250/0x250 [ 84.435604] ? __x64_sys_futex+0x477/0x680 [ 84.439828] ? do_futex+0x27d0/0x27d0 [ 84.443615] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.449138] __x64_sys_pselect6+0x1f7/0x280 [ 84.453448] do_syscall_64+0x1b1/0x800 [ 84.457318] ? finish_task_switch+0x1ca/0x810 [ 84.461799] ? syscall_return_slowpath+0x5c0/0x5c0 [ 84.466713] ? syscall_return_slowpath+0x30f/0x5c0 [ 84.471629] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 84.476982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.481813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.486982] RIP: 0033:0x455389 [ 84.490153] RSP: 002b:00007f1df9408c68 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 84.497843] RAX: ffffffffffffffda RBX: 00007f1df94096d4 RCX: 0000000000455389 [ 84.505097] RDX: 0000000020011000 RSI: 0000000020011fc0 RDI: 0000000000000040 [ 84.512350] RBP: 000000000072bf58 R08: 0000000020013000 R09: 0000000020001ff8 [ 84.519602] R10: 0000000020003000 R11: 0000000000000246 R12: 00000000ffffffff [ 84.526852] R13: 000000000000047c R14: 00000000006f9c40 R15: 0000000000000001 2018/04/21 02:18:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="8f84158f3b"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:18:56 executing program 4: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={"62726f7574650500", 0x20, 0x3, 0x398, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000bc0], 0x0, &(0x7f0000000000), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x0, 0x0, 'nr0\x00', 'gre0\x00', "62fc2ff77400", 'ip6gre0\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0x3, 0xf0, 0x138, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x19, 0x0, 0x0, 'ip6gretap0\x00', 'ip_vti0\x00', 'eql\x00', 'bcsh0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xe8, 0x130}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'irlan0\x00', 'bcsh0\x00', 'ip6_vti0\x00', 'irlan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x410) 2018/04/21 02:18:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000000140)}) 2018/04/21 02:18:56 executing program 7: r0 = socket$inet(0x2, 0x6, 0x0) mmap(&(0x7f0000893000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e01000)) connect$inet(r0, &(0x7f0000893ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/21 02:18:56 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000c41000)={0x0, 0x0, &(0x7f0000153000), 0x0, &(0x7f0000231f05)=""/251, 0xfb}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendmsg$kcm(r1, &(0x7f0000948000)={0x0, 0x0, &(0x7f00005dc000)=[{&(0x7f0000d43000), 0x1000002bb}], 0x1, &(0x7f0000d43000)}, 0x0) 2018/04/21 02:18:56 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) fallocate(r0, 0x3, 0x0, 0x100000001) 2018/04/21 02:18:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0xff42) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r2, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200a84b3f2df893ef000026ff0000000000000000000001fc0f7ccea078786e0ba40d"], 0x23}, 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffd84, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) 2018/04/21 02:18:56 executing program 6: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/32, 0x20}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)=""/159, 0x9f}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) io_getevents(0x0, 0x236, 0x1, &(0x7f0000000780)=[{}], &(0x7f00000000c0)={0x0, 0x989680}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000840)={0x0, {{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 2018/04/21 02:18:56 executing program 7: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:18:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000ef5000), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) [ 84.813561] ptrace attach of "/root/syz-executor6"[4530] was attempted by "/root/syz-executor6"[7231] [ 84.826817] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 84.839235] ptrace attach of "/root/syz-executor6"[4530] was attempted by "/root/syz-executor6"[7243] [ 84.853651] binder: 7230:7242 transaction failed 29189/-22, size 0-0 line 2848 2018/04/21 02:18:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x42336f1e) read(r0, &(0x7f00004bdf32)=""/206, 0xce) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000ddfffc)=0x403) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) [ 84.885284] binder: 7230:7242 Acquire 1 refcount change on invalid ref 0 ret -22 2018/04/21 02:18:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1e, 0x400080000028, 0xaff, 0x0, 0x0, {0x1000001}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @uid}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 02:18:56 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f}}) 2018/04/21 02:18:56 executing program 7: bind$rds(0xffffffffffffffff, &(0x7f000001cff0)={0x2, 0x0, @multicast2=0xe0000002}, 0xe) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x1000000000000002) openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x18040, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x404c534a, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') io_submit(0x0, 0x0, &(0x7f0000000440)) [ 84.949616] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 02:18:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x1}) 2018/04/21 02:18:56 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) read(r0, &(0x7f0000000000)=""/218, 0xda) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000480)="ab", 0x1}], 0x1) 2018/04/21 02:18:56 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80000, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0xffffffffffff8034, 0x1, 0x0, 0x1f, 0x0, 0x6, 0xa00, 0xb, 0x7f, 0x1248, 0xb622, 0x8, 0x1, 0x3, 0x7fffffff, 0x6, 0x7fffffff, 0x6, 0x9, 0x63, 0x7, 0xfffffffffffffff9, 0x0, 0x7, 0x2, 0x0, 0x2, 0xa5, 0x7e63, 0x80, 0x1246fd48, 0x7, 0x0, 0x6, 0x7, 0x401, 0x0, 0xffffffff80000001, 0x3, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x20000, 0x3, 0x1, 0x6, 0x0, 0xfff, 0x8}, r1, 0xd, r0, 0x1) r3 = socket$inet6(0xa, 0x800000806, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f000037fffd)={0x3, 0x1f}, 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) gettid() getuid() fstat(r1, &(0x7f0000000580)) r4 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000800)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000840)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xe8) r9 = getgid() sendmsg$unix(r1, &(0x7f0000000a40)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000280)="9e7f42c866a61ac68fa0d5dc605819562476017c67d61302ed8151d5efc2fb92e8afc850e07f32ede8104df9cc00d36a12588de320f05e20b241c2d53167f24aeb96174105e5a60d6a9cc2502a571fd813ffa8e4196f8e598cf1f37546e1b7", 0x5f}, {&(0x7f0000000340)="c6e496297aedc3e0febfe21e86e83967c02a02fa63c7af6b9fd90e82cd04f503bf2e4a4ff4e8dd6908685f48d00af2fcf6e53a9eb0b432f1c77b1fa85c6b26069efbe7232b5b262b38eb7e83aad5", 0x4e}, {&(0x7f0000000400)="cf3956d54e941b2a1e7edec647f82687be4089ce0d8db2c0530262130d50621ef2b36ba3c3356e597b1604414d80b41979a126c2a4fdb701a62e306ae3c1d1976d651efa14ee4fdb88daedc821db329ffdd120e34c1c67a40c8e1cec764598d1c32e6d1d285b9e956af3aa60520e6e6ba7d5792c0aa2e780e4f9ac41ff372292de956375b2c1f29931870c5102ba1b00b0b2f26a8ef16e08ee5ebb3ef88a9778680a4c5a11135738bb40096405943a4bf0c13cde04142475b063abe92dd87dddf7de99966e6557af2125cd68eeba58a564c16bdcd482a3be5c814757cfe738c6d5bacdb7374664e43aec5f638260a27ed87cd4213a6a", 0xf6}], 0x3, &(0x7f0000000980)=[@rights={0x10, 0x1, 0x1}, @rights={0x20, 0x1, 0x1, [r2, r2, r3, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x70}, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r3) 2018/04/21 02:18:56 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/21 02:18:56 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x420200) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r0) 2018/04/21 02:18:56 executing program 6: r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000740)={0x0, 0x0, r1}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000900)='/dev/rtc\x00', 0x800, 0x0) poll(&(0x7f0000000780)=[{r0, 0x2}, {r0, 0x82}, {r1, 0x2042}, {r0, 0x60}, {r0, 0x2017}, {r1, 0x8000}, {r1, 0x2}, {}, {r1, 0x28}, {r2}], 0xa, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000005c0)=0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000340)={0xffffffff, 0x4, 0x6, 0x0, 0x0, 0x0, 0x6, 0x77e, 0x4, 0x0, 0x2}) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) gettid() getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) r7 = syz_open_procfs(r6, &(0x7f0000000a40)="6d6170730012877dcdd3b205a03f0700645cfa3bb83d12f8660f639e20e000b4e53f4a39a523c73a68a8bfcffe4c99f74654fa5363f5eb61412ab2a82b5d097ac3e30f") setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000f46000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) getsockopt$inet6_opts(r7, 0x29, 0x3f, &(0x7f0000000b00)=""/81, &(0x7f00000008c0)=0x51) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r1}) readv(r7, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f0000000800)=""/170, 0xaa}], 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x20004840) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d3080", 0x28}], 0x1) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r8 = request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a}, &(0x7f0000000580)='IPVS\x00', 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) signalfd4(r5, &(0x7f0000000700)={0x3}, 0x8, 0x80000) r9 = request_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='keyring]ppp1>\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r8, &(0x7f0000000c40)="d57f18047a297767cfd9c4a176a491e7db7b5dbf58067875cb83c5d1d2c0a0d43b6a4f2dc50d8f07719173a4c46a6c4ef88e5d5a71832ac28c003a233be6847b7394b2b3f654fa4f8ce9047d3c3bb5f000934d79352d8dc23756b88e129a601bcee52a0e71ebcaf7044f9e1b34d7ebab0adcb94b0a68b8e5921178a0330cab585fe47ada365c3f5f52557497e7c6d05ccd8643a4398e804d246b56f93901774663196ffd9d831af32d0ae1533cbd1aabd31c925d122c1008595105ae56", 0xbd, r9) modify_ldt$read(0x0, &(0x7f00000006c0)=""/8, 0x8) 2018/04/21 02:18:56 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000c41000)={0x0, 0x0, &(0x7f0000153000), 0x0, &(0x7f0000231f05)=""/251, 0xfb}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendmsg$kcm(r1, &(0x7f0000948000)={0x0, 0x0, &(0x7f00005dc000)=[{&(0x7f0000d43000), 0x1000002bb}], 0x1, &(0x7f0000d43000)}, 0x0) 2018/04/21 02:18:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)}]) 2018/04/21 02:18:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0xff42) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r2, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200a84b3f2df893ef000026ff0000000000000000000001fc0f7ccea078786e0ba40d"], 0x23}, 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffd84, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) 2018/04/21 02:18:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000000000)='./0ile0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:18:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0xeffdffff, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/21 02:18:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000580)={0x1, {&(0x7f00000002c0)=""/219, 0xdb, &(0x7f0000000480)=""/98, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) [ 85.869093] random: crng init done 2018/04/21 02:18:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x2d, 0xaff, 0x0, 0x0, {0x4001}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @binary='\b'}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 02:18:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0xeffdffff, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/21 02:18:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00005ba000)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000991000)=0x8) 2018/04/21 02:18:58 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4effc), 0x9) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/21 02:18:58 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r0, 0x0) syz_fuseblk_mount(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:18:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000300)=""/231, 0xe7}], 0x2) 2018/04/21 02:18:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0xff42) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r2, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200a84b3f2df893ef000026ff0000000000000000000001fc0f7ccea078786e0ba40d"], 0x23}, 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffd84, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) 2018/04/21 02:18:58 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000c41000)={0x0, 0x0, &(0x7f0000153000), 0x0, &(0x7f0000231f05)=""/251, 0xfb}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendmsg$kcm(r1, &(0x7f0000948000)={0x0, 0x0, &(0x7f00005dc000)=[{&(0x7f0000d43000), 0x1000002bb}], 0x1, &(0x7f0000d43000)}, 0x0) [ 86.981396] ================================================================== [ 86.988954] BUG: KASAN: slab-out-of-bounds in __sctp_v6_cmp_addr+0x4c7/0x530 [ 86.996145] Read of size 8 at addr ffff8801d0f65750 by task syz-executor3/7357 [ 87.003499] [ 87.005132] CPU: 0 PID: 7357 Comm: syz-executor3 Not tainted 4.17.0-rc1+ #10 [ 87.012316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.021664] Call Trace: [ 87.024248] dump_stack+0x1b9/0x294 [ 87.027868] ? dump_stack_print_info.cold.2+0x52/0x52 [ 87.033048] ? printk+0x9e/0xba [ 87.036317] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 87.041066] ? kasan_check_write+0x14/0x20 [ 87.045293] print_address_description+0x6c/0x20b [ 87.050133] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 87.054618] kasan_report.cold.7+0x242/0x2fe [ 87.059030] __asan_report_load8_noabort+0x14/0x20 [ 87.063949] __sctp_v6_cmp_addr+0x4c7/0x530 [ 87.068260] sctp_inet6_cmp_addr+0x169/0x1a0 [ 87.072664] sctp_bind_addr_conflict+0x28c/0x470 [ 87.077415] ? sctp_bind_addr_match+0x400/0x400 [ 87.082114] ? kasan_check_write+0x14/0x20 [ 87.086337] ? do_raw_spin_lock+0xc1/0x200 [ 87.090567] sctp_get_port_local+0x9fc/0x1540 [ 87.095056] ? print_irqtrace_events+0x95/0x1fa [ 87.099713] ? sctp_set_owner_w+0x530/0x530 [ 87.104033] ? rcu_is_watching+0x85/0x140 [ 87.108171] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 87.113359] ? sctp_bind_addr_match+0x2c6/0x400 [ 87.118028] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 87.122867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.128389] ? sctp_v4_available+0x1b1/0x200 [ 87.132793] ? sctp_inet6_bind_verify+0xb2/0x500 [ 87.137536] sctp_do_bind+0x21c/0x5f0 [ 87.141334] sctp_bindx_add+0x90/0x1a0 [ 87.145214] sctp_setsockopt_bindx+0x2ad/0x320 [ 87.149795] sctp_setsockopt+0x12c4/0x7000 [ 87.154025] ? __lock_acquire+0x7f5/0x5140 [ 87.158255] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 87.163967] ? debug_check_no_locks_freed+0x310/0x310 [ 87.169146] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.174672] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 87.179763] ? futex_wait+0x5c1/0x9f0 [ 87.183565] ? futex_wait_setup+0x400/0x400 [ 87.187879] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 87.193061] ? perf_trace_lock+0xd6/0x900 [ 87.197195] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.202034] ? zap_class+0x720/0x720 [ 87.205756] ? perf_trace_lock+0x900/0x900 [ 87.209988] ? get_futex_key+0x1e90/0x1e90 [ 87.214213] ? graph_lock+0x170/0x170 [ 87.218021] ? sock_alloc_file+0x1f3/0x4e0 [ 87.222246] ? __x64_sys_socket+0x73/0xb0 [ 87.226385] ? find_held_lock+0x36/0x1c0 [ 87.230445] ? lock_downgrade+0x8e0/0x8e0 [ 87.234589] ? rcu_is_watching+0x85/0x140 [ 87.238725] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 87.243913] ? __fget+0x40c/0x650 [ 87.247362] ? expand_files.part.8+0x9a0/0x9a0 [ 87.251932] ? lock_downgrade+0x8e0/0x8e0 [ 87.256077] ? __lock_is_held+0xb5/0x140 [ 87.260126] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 87.265307] ? __fget_light+0x2ef/0x430 [ 87.269272] ? fget_raw+0x20/0x20 [ 87.272720] ? get_unused_fd_flags+0x190/0x190 [ 87.277294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.282819] ? alloc_file+0x44/0x3e0 [ 87.286525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.292051] ? sock_alloc_file+0x2a4/0x4e0 [ 87.296278] sock_common_setsockopt+0x9a/0xe0 [ 87.300771] __sys_setsockopt+0x1bd/0x390 [ 87.304908] ? kernel_accept+0x310/0x310 [ 87.308959] ? do_futex+0x27d0/0x27d0 [ 87.312751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.318276] ? fput+0x130/0x1a0 [ 87.321552] __x64_sys_setsockopt+0xbe/0x150 [ 87.325948] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 87.330955] do_syscall_64+0x1b1/0x800 [ 87.334829] ? finish_task_switch+0x1ca/0x810 [ 87.339311] ? syscall_return_slowpath+0x5c0/0x5c0 [ 87.344232] ? syscall_return_slowpath+0x30f/0x5c0 [ 87.349155] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 87.354510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.359343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.364515] RIP: 0033:0x455389 [ 87.367688] RSP: 002b:00007fbe7b893c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.375383] RAX: ffffffffffffffda RBX: 00007fbe7b8946d4 RCX: 0000000000455389 [ 87.382636] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000014 [ 87.389902] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 87.397159] R10: 00000000205ba000 R11: 0000000000000246 R12: 00000000ffffffff [ 87.404415] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 87.411685] [ 87.413297] Allocated by task 7357: [ 87.416911] save_stack+0x43/0xd0 [ 87.420349] kasan_kmalloc+0xc4/0xe0 [ 87.424052] __kmalloc_node+0x47/0x70 [ 87.427840] kvmalloc_node+0x6b/0x100 [ 87.431627] vmemdup_user+0x2d/0xa0 [ 87.435238] sctp_setsockopt_bindx+0x5d/0x320 [ 87.439720] sctp_setsockopt+0x12c4/0x7000 [ 87.443939] sock_common_setsockopt+0x9a/0xe0 [ 87.448419] __sys_setsockopt+0x1bd/0x390 [ 87.452554] __x64_sys_setsockopt+0xbe/0x150 [ 87.456950] do_syscall_64+0x1b1/0x800 [ 87.460822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.465990] [ 87.467604] Freed by task 1: [ 87.470609] save_stack+0x43/0xd0 [ 87.474049] __kasan_slab_free+0x11a/0x170 [ 87.478271] kasan_slab_free+0xe/0x10 [ 87.482059] kfree+0xd9/0x260 [ 87.485150] kfree_const+0x59/0x70 [ 87.488673] kobject_put+0x1af/0x280 [ 87.492371] put_device+0x20/0x30 [ 87.495816] __scsi_scan_target+0x22d/0xfe0 [ 87.500124] scsi_scan_channel.part.7+0x11f/0x190 [ 87.504953] scsi_scan_host_selected+0x2b9/0x3d0 [ 87.509692] do_scsi_scan_host+0x1ee/0x260 [ 87.513912] scsi_scan_host+0x4a2/0x590 [ 87.517870] virtscsi_probe+0xbe5/0xf04 [ 87.521829] virtio_dev_probe+0x592/0x942 [ 87.525964] driver_probe_device+0x69b/0x960 [ 87.530356] __driver_attach+0x1b2/0x1f0 [ 87.534399] bus_for_each_dev+0x151/0x1d0 [ 87.538535] driver_attach+0x3d/0x50 [ 87.542235] bus_add_driver+0x4b2/0x600 [ 87.546196] driver_register+0x1bf/0x320 [ 87.550242] register_virtio_driver+0x79/0xd0 [ 87.554724] init+0xa3/0x114 [ 87.557730] do_one_initcall+0x127/0x913 [ 87.561781] kernel_init_freeable+0x49b/0x58e [ 87.566260] kernel_init+0x11/0x1b3 [ 87.569869] ret_from_fork+0x3a/0x50 [ 87.573562] [ 87.575178] The buggy address belongs to the object at ffff8801d0f65740 [ 87.575178] which belongs to the cache kmalloc-32 of size 32 [ 87.587646] The buggy address is located 16 bytes inside of [ 87.587646] 32-byte region [ffff8801d0f65740, ffff8801d0f65760) [ 87.599328] The buggy address belongs to the page: [ 87.604243] page:ffffea000743d940 count:1 mapcount:0 mapping:ffff8801d0f65000 index:0xffff8801d0f65fc1 [ 87.613672] flags: 0x2fffc0000000100(slab) [ 87.617897] raw: 02fffc0000000100 ffff8801d0f65000 ffff8801d0f65fc1 000000010000003f [ 87.625764] raw: ffffea00074106e0 ffffea0007418220 ffff8801da8001c0 0000000000000000 [ 87.633623] page dumped because: kasan: bad access detected [ 87.639309] [ 87.640921] Memory state around the buggy address: [ 87.645834] ffff8801d0f65600: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 87.653175] ffff8801d0f65680: 00 00 04 fc fc fc fc fc 00 00 04 fc fc fc fc fc [ 87.660518] >ffff8801d0f65700: 00 00 04 fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 87.667858] ^ [ 87.673813] ffff8801d0f65780: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 87.681154] ffff8801d0f65800: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 87.688493] ================================================================== [ 87.695829] Disabling lock debugging due to kernel taint [ 87.701323] Kernel panic - not syncing: panic_on_warn set ... [ 87.701323] [ 87.708683] CPU: 0 PID: 7357 Comm: syz-executor3 Tainted: G B 4.17.0-rc1+ #10 [ 87.717249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.726593] Call Trace: [ 87.729188] dump_stack+0x1b9/0x294 [ 87.732821] ? dump_stack_print_info.cold.2+0x52/0x52 [ 87.738011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 87.742754] ? __sctp_v6_cmp_addr+0x4a0/0x530 [ 87.747230] panic+0x22f/0x4de [ 87.750406] ? add_taint.cold.5+0x16/0x16 [ 87.754539] ? do_raw_spin_unlock+0x9e/0x2e0 [ 87.758930] ? do_raw_spin_unlock+0x9e/0x2e0 [ 87.763326] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 87.767804] kasan_end_report+0x47/0x4f [ 87.771760] kasan_report.cold.7+0x76/0x2fe [ 87.776066] __asan_report_load8_noabort+0x14/0x20 [ 87.780977] __sctp_v6_cmp_addr+0x4c7/0x530 [ 87.785282] sctp_inet6_cmp_addr+0x169/0x1a0 [ 87.789676] sctp_bind_addr_conflict+0x28c/0x470 [ 87.794417] ? sctp_bind_addr_match+0x400/0x400 [ 87.799070] ? kasan_check_write+0x14/0x20 [ 87.803286] ? do_raw_spin_lock+0xc1/0x200 [ 87.807504] sctp_get_port_local+0x9fc/0x1540 [ 87.811983] ? print_irqtrace_events+0x95/0x1fa [ 87.816635] ? sctp_set_owner_w+0x530/0x530 [ 87.820938] ? rcu_is_watching+0x85/0x140 [ 87.825066] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 87.830246] ? sctp_bind_addr_match+0x2c6/0x400 [ 87.834898] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 87.839733] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.845252] ? sctp_v4_available+0x1b1/0x200 [ 87.849645] ? sctp_inet6_bind_verify+0xb2/0x500 [ 87.854384] sctp_do_bind+0x21c/0x5f0 [ 87.858168] sctp_bindx_add+0x90/0x1a0 [ 87.862042] sctp_setsockopt_bindx+0x2ad/0x320 [ 87.866610] sctp_setsockopt+0x12c4/0x7000 [ 87.870828] ? __lock_acquire+0x7f5/0x5140 [ 87.875043] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 87.880745] ? debug_check_no_locks_freed+0x310/0x310 [ 87.885917] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.891438] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 87.896525] ? futex_wait+0x5c1/0x9f0 [ 87.900313] ? futex_wait_setup+0x400/0x400 [ 87.904617] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 87.909789] ? perf_trace_lock+0xd6/0x900 [ 87.913917] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.918751] ? zap_class+0x720/0x720 [ 87.922448] ? perf_trace_lock+0x900/0x900 [ 87.926663] ? get_futex_key+0x1e90/0x1e90 [ 87.930882] ? graph_lock+0x170/0x170 [ 87.935112] ? sock_alloc_file+0x1f3/0x4e0 [ 87.939329] ? __x64_sys_socket+0x73/0xb0 [ 87.943459] ? find_held_lock+0x36/0x1c0 [ 87.947507] ? lock_downgrade+0x8e0/0x8e0 [ 87.951640] ? rcu_is_watching+0x85/0x140 [ 87.955769] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 87.960944] ? __fget+0x40c/0x650 [ 87.964382] ? expand_files.part.8+0x9a0/0x9a0 [ 87.968944] ? lock_downgrade+0x8e0/0x8e0 [ 87.973077] ? __lock_is_held+0xb5/0x140 [ 87.977120] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 87.982291] ? __fget_light+0x2ef/0x430 [ 87.986250] ? fget_raw+0x20/0x20 [ 87.989687] ? get_unused_fd_flags+0x190/0x190 [ 87.994259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.999777] ? alloc_file+0x44/0x3e0 [ 88.003476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.008995] ? sock_alloc_file+0x2a4/0x4e0 [ 88.013218] sock_common_setsockopt+0x9a/0xe0 [ 88.017696] __sys_setsockopt+0x1bd/0x390 [ 88.021832] ? kernel_accept+0x310/0x310 [ 88.025878] ? do_futex+0x27d0/0x27d0 [ 88.029661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 88.035186] ? fput+0x130/0x1a0 [ 88.038450] __x64_sys_setsockopt+0xbe/0x150 [ 88.042842] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 88.047842] do_syscall_64+0x1b1/0x800 [ 88.051727] ? finish_task_switch+0x1ca/0x810 [ 88.056205] ? syscall_return_slowpath+0x5c0/0x5c0 [ 88.061116] ? syscall_return_slowpath+0x30f/0x5c0 [ 88.066032] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 88.071380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.076205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.081373] RIP: 0033:0x455389 [ 88.084544] RSP: 002b:00007fbe7b893c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.092233] RAX: ffffffffffffffda RBX: 00007fbe7b8946d4 RCX: 0000000000455389 [ 88.099484] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000014 [ 88.106734] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 88.113984] R10: 00000000205ba000 R11: 0000000000000246 R12: 00000000ffffffff [ 88.121234] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 88.128955] Dumping ftrace buffer: [ 88.132475] (ftrace buffer empty) [ 88.136158] Kernel Offset: disabled [ 88.139762] Rebooting in 86400 seconds..