0x0, @broadcast=0xffffffff}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x10000}, 0x10) pipe(&(0x7f0000000440)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r5, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000480)={0x800, 0x0, 0x1, 0x2}) r6 = socket(0xa, 0x8080e, 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000600)={0x6, {{0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x373}}}, 0x88) sendmsg$unix(r6, &(0x7f0000000200)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="64dac1c80cb4923a0ca68051d34c3ea8a36f671a75bfb3a7", 0x18}], 0x1}, 0x4814) bind$rds(r0, &(0x7f0000000700)={0x2, 0x0, @rand_addr=0x7fff}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000180)=0xd881, 0x4) 2018/04/05 22:47:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2018/04/05 22:47:49 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2018/04/05 22:47:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x12, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:49 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x5}) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/114) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:47:49 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr}}, 0x1e) 2018/04/05 22:47:49 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x4, 0x0) 2018/04/05 22:47:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(r2, 0xc0046209, &(0x7f0000830f3b)=""/197) 2018/04/05 22:47:49 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2018/04/05 22:47:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000800fd26b168f559d29656797be82d5a4e7e4c0c8ec56fa07abe643f90205928e429b698c40e07f1e243fa535d09a0a2e56c8870d12a866151a6d8a18a72efe648c5de9133f38dd8b37d35f591b5b5510a72ad290935068319671aa6e159913c177785a9e1a7e3555207dbd7207ac7d631992d7469dd1a67d44590f175400730540b6c5ed1cf7d06871701d903da2426f7ff947f12f33e20d89e254572edf91d817a8548d3ac6dc41a01a5aada48ff9b405f978df2d0ebcec6d8077bd450625f5d992bce3442af8fca152081b6c71c7d50f327d5f323176fd4e3db489761028d952cf2d758bea26d32ecf8d2cea777a2fe30a993b3569a437dc5788daef41e588831f2e0a78712758b09bde064f51624c134a939da3c8d341655748842e06fb748b718decd0284be92c5c7f530377fe3d2434baa73c6535795d2a6535310bc652a85c4f07856764706bcb036afd2f078bef1da785cb1c8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2018/04/05 22:47:49 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x12, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:49 executing program 5: syz_emit_ethernet(0x42, &(0x7f00000a8fa2)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff, {[@timestamp={0x44, 0xc, 0x9, 0x1, 0x0, [{[@empty]}]}]}}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000387000)) [ 182.301054] can: request_module (can-proto-0) failed. 2018/04/05 22:47:49 executing program 1: syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/04/05 22:47:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x12, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2018/04/05 22:47:49 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) [ 182.398392] can: request_module (can-proto-0) failed. 2018/04/05 22:47:50 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="00010000000000000000000007020000ec00000001000002000000000000000000200000002000000001000000000000495fbe5a0000ffff53ef010001007f8e31f66146560000495fbe5a000000000000cd612ffa08451165a0ce0e95831172f8805e199e9c", 0x66, 0x400}], 0x0, &(0x7f0000013700)) 2018/04/05 22:47:50 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x4, 0x0) [ 182.596720] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 182.608813] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 182.667609] can: request_module (can-proto-0) failed. [ 182.683944] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 182.696079] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 2018/04/05 22:47:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x7, 0x3, {0x2, 0x0, 0x1, 0x1, 0xffc}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/4096) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x8000000002, 0x1e, 0xfffffffffffffff9, 0x1000e0, "46da9ddb6ac9d05b88b22d869bc001bb2398dae6698dde653d754a2a75e544ea"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r2, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000014c0)={0x0, 0xfeb, 0x5883, 0x2, 0x80, 0xfb2, 0x8, 0x400, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x7, 0x0, 0x3, 0x5, 0x3}}, &(0x7f0000001340)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001580)={r3, 0x4, 0x10000, 0x3}, &(0x7f00000015c0)=0x10) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000002a80), 0x2) r5 = dup(r2) write$eventfd(r5, &(0x7f0000605ff8), 0x10235) write$eventfd(r5, &(0x7f0000000040), 0xfdc8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x80000000, 0x2, [0x100000000, 0x401]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000012c0)={r6, 0x2}, &(0x7f0000001300)=0xc) writev(r5, &(0x7f00000013c0)=[{&(0x7f0000000380)='T', 0x1}], 0x1) perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x3bc}, 0x10) sendmsg(r8, &(0x7f0000002880)={&(0x7f0000001380)=@ll={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001400)="3db7e165b3ff078b0286b624bd83778bb52d36e49c42866a54fa18225ce83ad6edd6f8d96314c173e51f4622cfe221fdf55e9681694761751fc99dfe22b3ea722fa43da1685846f95e162e8c7ba3d9a656f15741bfd1cb4914717fdb51037555ebff24a21dda07f3f7f18cc86de6c400801e0744c1886004982f0140a4f1a47309d392", 0x83}], 0x1, &(0x7f0000001600)=ANY=[], 0x0, 0x800}, 0x40000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x9e, 0x7e, 0x5) syz_open_dev$mouse(&(0x7f0000001680)='/dev/input/mouse#\x00', 0x6, 0x80) 2018/04/05 22:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x20000000000001, &(0x7f00007b1000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 22:47:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x12, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:50 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 22:47:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="00010000000000000000000007020000ec00000001000002000000000000000000200000002000000001000000000000495fbe5a0000ffff53ef010001007f8e31f66146560000495fbe5a000000000000cd612ffa08451165a0ce0e95831172f8805e199e9c", 0x66, 0x400}], 0x0, &(0x7f0000013700)) 2018/04/05 22:47:50 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x4, 0x0) 2018/04/05 22:47:50 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:50 executing program 4: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x4000008d}, 0x2d1) 2018/04/05 22:47:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000fb5ff0), 0x1) 2018/04/05 22:47:51 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="637075262d3200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") [ 183.458309] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 183.470434] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 2018/04/05 22:47:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendto(r2, &(0x7f0000000100)="431457990e33684f6750f7ae82e7c5bbc4d9ca6fd12c8aca813e6a69a6337c0cbf09ce7c61d3e38a7525a92f84c730e669844b0e81569f497b7758214b2c4720dfd55cf2a5f25c6ca864a87573a68844b84c4a277ae365234dff394b866d2638a949bdec52aa43c92129115848e0a8ec5a3e61c7ce92b4c8ab4648560f310033aedfd7c90a75bbec74342015ecf1ac83c32919b90b2b65b688ea272e0865ecfd259fa4c9fcb529afbc809a1a73bcc213c808bc3b24af", 0xb6, 0x4000, &(0x7f00000001c0)=@in6={0xa, 0x2, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x80) write$cgroup_int(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="393a340daa21105a89b63fed6bbd488ca8ddf9889ecc5bdda7c4589fb8f5fffcbd0d311af1cf21aefabc932d6ffe2c0fba6afb7d88a7d506151b2bdb098d23f963c8b8e53b83bda7ffa64ac3d6a98375e7111f9c31f61963910c80bf5dbc78a364439ac575b03470db7aa058bc63e0d34d3e9bd23ebb435571b9d2c5fda55a3c01f209df3e5a9c84b29c52943dc6c4b363701e3ac8827d23dcd9e9effa6b8325a3831c3a7437434f66e6ab428ddb60c8800a5fba56c3fe9986d7d1c350f987251d51c00d510d8654ae732021a9a3be0252d005c21dc53a792cd0d1e2635460b1666cf614d1043bdaec02c4625115ff11d393970c3e5c11a50d86b214334cb8a94e12254c5e599b5bf6415007d5ad7b1d705dc7d9f6fa8af280c05d97ab3a1cd5404d725d5279d5b56b01df140768891d6b7d555a4917b70a4ea8b65040712fc5ffaf9cebd1a0e8f9a7eb5b9ff97c922e5d2b2f1a35ce7f1d6fc9d2d6ae65f48ed57b33da15dece542ccc351c2c95f7ef23f6cc7d7d957d431e645574f11dd82625148c89370fe5b042928be3d441bd16d1265b23e5"], 0x195) [ 183.512710] can: request_module (can-proto-0) failed. 2018/04/05 22:47:51 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000280)=0x100000003, 0x4) 2018/04/05 22:47:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) shutdown(r0, 0x0) 2018/04/05 22:47:51 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x4, 0x0) 2018/04/05 22:47:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/05 22:47:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="00010000000000000000000007020000ec00000001000002000000000000000000200000002000000001000000000000495fbe5a0000ffff53ef010001007f8e31f66146560000495fbe5a000000000000cd612ffa08451165a0ce0e95831172f8805e199e9c", 0x66, 0x400}], 0x0, &(0x7f0000013700)) [ 183.739625] can: request_module (can-proto-0) failed. [ 183.750334] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 183.762417] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 184.323212] ALSA: seq fatal error: cannot create timer (-22) 2018/04/05 22:47:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="00010000000000000000000007020000ec00000001000002000000000000000000200000002000000001000000000000495fbe5a0000ffff53ef010001007f8e31f66146560000495fbe5a000000000000cd612ffa08451165a0ce0e95831172f8805e199e9c", 0x66, 0x400}], 0x0, &(0x7f0000013700)) 2018/04/05 22:47:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x52}, 0x1}, 0x0) 2018/04/05 22:47:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3e) prlimit64(0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffa, 0xc7f2}, 0x0) sendto$inet(r0, &(0x7f0000ef4000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2}, 0x10) recvmmsg(r0, &(0x7f0000000140), 0x50, 0x2, &(0x7f00000001c0)={0x0, 0x989680}) 2018/04/05 22:47:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x7, 0x3, {0x2, 0x0, 0x1, 0x1, 0xffc}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/4096) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x8000000002, 0x1e, 0xfffffffffffffff9, 0x1000e0, "46da9ddb6ac9d05b88b22d869bc001bb2398dae6698dde653d754a2a75e544ea"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r2, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000014c0)={0x0, 0xfeb, 0x5883, 0x2, 0x80, 0xfb2, 0x8, 0x400, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x7, 0x0, 0x3, 0x5, 0x3}}, &(0x7f0000001340)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001580)={r3, 0x4, 0x10000, 0x3}, &(0x7f00000015c0)=0x10) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000002a80), 0x2) r5 = dup(r2) write$eventfd(r5, &(0x7f0000605ff8), 0x10235) write$eventfd(r5, &(0x7f0000000040), 0xfdc8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x80000000, 0x2, [0x100000000, 0x401]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000012c0)={r6, 0x2}, &(0x7f0000001300)=0xc) writev(r5, &(0x7f00000013c0)=[{&(0x7f0000000380)='T', 0x1}], 0x1) perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x3bc}, 0x10) sendmsg(r8, &(0x7f0000002880)={&(0x7f0000001380)=@ll={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001400)="3db7e165b3ff078b0286b624bd83778bb52d36e49c42866a54fa18225ce83ad6edd6f8d96314c173e51f4622cfe221fdf55e9681694761751fc99dfe22b3ea722fa43da1685846f95e162e8c7ba3d9a656f15741bfd1cb4914717fdb51037555ebff24a21dda07f3f7f18cc86de6c400801e0744c1886004982f0140a4f1a47309d392", 0x83}], 0x1, &(0x7f0000001600)=ANY=[], 0x0, 0x800}, 0x40000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x9e, 0x7e, 0x5) syz_open_dev$mouse(&(0x7f0000001680)='/dev/input/mouse#\x00', 0x6, 0x80) 2018/04/05 22:47:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000007e8854360f41c9692c5b056eaa2f614da0deb589e91398c5122355c58a3bab36aa44695b174282421d52f42befac1866e989bdaed624ed5c9be92428b5c1401393bdc602c9f9108642db867331eb0e704c6290952084f90a5e1adbb9690966368b074efef5e3ce3ad1e86e8a60bb83e398b39916529b50a1596822756b9308650a7d425c6c639dbec9bde2b76496e56dc08129bb90074a6e7e02156462b00362942dab1f32e73e7a2b980e39647da3b337ea7d17d8d5167d7e9e3884f25d87406466f048f29aedd813fdacef315d974500398cbab0b4a33d11a5d84c2015fb673aaa6e3c6d7ae4c10f586da6e777e71f5fb26d43bc510d66a10293504e5c9e454a9736e9b65f76e005c49312a2681e5236b4d5fb318ad2b8b2927a9286921e1d2ed3d06b1a67183cd92bdd270cf47e50ced63864d17c44051d3ecdd0c64146ee1ecd8ee7910b84895c86af300d48d54f2d425031d405b459ed1d93d177a13afa69cb50a360249d6418cd933fd77e2e206f659addd830de"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:51 executing program 0: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x2000007) dup2(r0, r2) 2018/04/05 22:47:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendto(r2, &(0x7f0000000100)="431457990e33684f6750f7ae82e7c5bbc4d9ca6fd12c8aca813e6a69a6337c0cbf09ce7c61d3e38a7525a92f84c730e669844b0e81569f497b7758214b2c4720dfd55cf2a5f25c6ca864a87573a68844b84c4a277ae365234dff394b866d2638a949bdec52aa43c92129115848e0a8ec5a3e61c7ce92b4c8ab4648560f310033aedfd7c90a75bbec74342015ecf1ac83c32919b90b2b65b688ea272e0865ecfd259fa4c9fcb529afbc809a1a73bcc213c808bc3b24af", 0xb6, 0x4000, &(0x7f00000001c0)=@in6={0xa, 0x2, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x80) write$cgroup_int(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="393a340daa21105a89b63fed6bbd488ca8ddf9889ecc5bdda7c4589fb8f5fffcbd0d311af1cf21aefabc932d6ffe2c0fba6afb7d88a7d506151b2bdb098d23f963c8b8e53b83bda7ffa64ac3d6a98375e7111f9c31f61963910c80bf5dbc78a364439ac575b03470db7aa058bc63e0d34d3e9bd23ebb435571b9d2c5fda55a3c01f209df3e5a9c84b29c52943dc6c4b363701e3ac8827d23dcd9e9effa6b8325a3831c3a7437434f66e6ab428ddb60c8800a5fba56c3fe9986d7d1c350f987251d51c00d510d8654ae732021a9a3be0252d005c21dc53a792cd0d1e2635460b1666cf614d1043bdaec02c4625115ff11d393970c3e5c11a50d86b214334cb8a94e12254c5e599b5bf6415007d5ad7b1d705dc7d9f6fa8af280c05d97ab3a1cd5404d725d5279d5b56b01df140768891d6b7d555a4917b70a4ea8b65040712fc5ffaf9cebd1a0e8f9a7eb5b9ff97c922e5d2b2f1a35ce7f1d6fc9d2d6ae65f48ed57b33da15dece542ccc351c2c95f7ef23f6cc7d7d957d431e645574f11dd82625148c89370fe5b042928be3d441bd16d1265b23e5"], 0x195) 2018/04/05 22:47:51 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 184.397143] ALSA: seq fatal error: cannot create timer (-22) 2018/04/05 22:47:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendto(r2, &(0x7f0000000100)="431457990e33684f6750f7ae82e7c5bbc4d9ca6fd12c8aca813e6a69a6337c0cbf09ce7c61d3e38a7525a92f84c730e669844b0e81569f497b7758214b2c4720dfd55cf2a5f25c6ca864a87573a68844b84c4a277ae365234dff394b866d2638a949bdec52aa43c92129115848e0a8ec5a3e61c7ce92b4c8ab4648560f310033aedfd7c90a75bbec74342015ecf1ac83c32919b90b2b65b688ea272e0865ecfd259fa4c9fcb529afbc809a1a73bcc213c808bc3b24af", 0xb6, 0x4000, &(0x7f00000001c0)=@in6={0xa, 0x2, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x80) write$cgroup_int(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x195) 2018/04/05 22:47:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 184.452214] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 184.464286] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 2018/04/05 22:47:52 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) close(r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000004000)) flock(r1, 0x6) ioctl$sock_SIOCINQ(r1, 0xc0189436, &(0x7f0000000100)) 2018/04/05 22:47:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendto(r2, &(0x7f0000000100)="431457990e33684f6750f7ae82e7c5bbc4d9ca6fd12c8aca813e6a69a6337c0cbf09ce7c61d3e38a7525a92f84c730e669844b0e81569f497b7758214b2c4720dfd55cf2a5f25c6ca864a87573a68844b84c4a277ae365234dff394b866d2638a949bdec52aa43c92129115848e0a8ec5a3e61c7ce92b4c8ab4648560f310033aedfd7c90a75bbec74342015ecf1ac83c32919b90b2b65b688ea272e0865ecfd259fa4c9fcb529afbc809a1a73bcc213c808bc3b24af", 0xb6, 0x4000, &(0x7f00000001c0)=@in6={0xa, 0x2, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x80) write$cgroup_int(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x195) [ 185.381132] ALSA: seq fatal error: cannot create timer (-22) 2018/04/05 22:47:53 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 22:47:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="0f01d10f23bdbaf80c66b85cea958566efbafc0c66ed66b9960000400f32660f3a624300080fc75dc8fe8b0f000f0d5e42baf80c66b842a2378366efbafc0cb80b47efba4200ec"}], 0xaaaace6, 0x0, &(0x7f0000000140)=[@vmwrite={0x8}, @dstype3={0x7, 0xf}], 0x12dd) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:47:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000007e8854360f41c9692c5b056eaa2f614da0deb589e91398c5122355c58a3bab36aa44695b174282421d52f42befac1866e989bdaed624ed5c9be92428b5c1401393bdc602c9f9108642db867331eb0e704c6290952084f90a5e1adbb9690966368b074efef5e3ce3ad1e86e8a60bb83e398b39916529b50a1596822756b9308650a7d425c6c639dbec9bde2b76496e56dc08129bb90074a6e7e02156462b00362942dab1f32e73e7a2b980e39647da3b337ea7d17d8d5167d7e9e3884f25d87406466f048f29aedd813fdacef315d974500398cbab0b4a33d11a5d84c2015fb673aaa6e3c6d7ae4c10f586da6e777e71f5fb26d43bc510d66a10293504e5c9e454a9736e9b65f76e005c49312a2681e5236b4d5fb318ad2b8b2927a9286921e1d2ed3d06b1a67183cd92bdd270cf47e50ced63864d17c44051d3ecdd0c64146ee1ecd8ee7910b84895c86af300d48d54f2d425031d405b459ed1d93d177a13afa69cb50a360249d6418cd933fd77e2e206f659addd830de"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x7, 0x3, {0x2, 0x0, 0x1, 0x1, 0xffc}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/4096) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x8000000002, 0x1e, 0xfffffffffffffff9, 0x1000e0, "46da9ddb6ac9d05b88b22d869bc001bb2398dae6698dde653d754a2a75e544ea"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r2, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000014c0)={0x0, 0xfeb, 0x5883, 0x2, 0x80, 0xfb2, 0x8, 0x400, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x7, 0x0, 0x3, 0x5, 0x3}}, &(0x7f0000001340)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001580)={r3, 0x4, 0x10000, 0x3}, &(0x7f00000015c0)=0x10) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000002a80), 0x2) r5 = dup(r2) write$eventfd(r5, &(0x7f0000605ff8), 0x10235) write$eventfd(r5, &(0x7f0000000040), 0xfdc8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x80000000, 0x2, [0x100000000, 0x401]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000012c0)={r6, 0x2}, &(0x7f0000001300)=0xc) writev(r5, &(0x7f00000013c0)=[{&(0x7f0000000380)='T', 0x1}], 0x1) perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x3bc}, 0x10) sendmsg(r8, &(0x7f0000002880)={&(0x7f0000001380)=@ll={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001400)="3db7e165b3ff078b0286b624bd83778bb52d36e49c42866a54fa18225ce83ad6edd6f8d96314c173e51f4622cfe221fdf55e9681694761751fc99dfe22b3ea722fa43da1685846f95e162e8c7ba3d9a656f15741bfd1cb4914717fdb51037555ebff24a21dda07f3f7f18cc86de6c400801e0744c1886004982f0140a4f1a47309d392", 0x83}], 0x1, &(0x7f0000001600)=ANY=[], 0x0, 0x800}, 0x40000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x9e, 0x7e, 0x5) syz_open_dev$mouse(&(0x7f0000001680)='/dev/input/mouse#\x00', 0x6, 0x80) 2018/04/05 22:47:53 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000040)={'gre0\x00'}) 2018/04/05 22:47:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:53 executing program 0: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x2000007) dup2(r0, r2) 2018/04/05 22:47:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 22:47:54 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x8000}) 2018/04/05 22:47:54 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000180)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104ff00fd437f0000000000f3050100080006000000fdff00ffff", 0x1f) 2018/04/05 22:47:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000007e8854360f41c9692c5b056eaa2f614da0deb589e91398c5122355c58a3bab36aa44695b174282421d52f42befac1866e989bdaed624ed5c9be92428b5c1401393bdc602c9f9108642db867331eb0e704c6290952084f90a5e1adbb9690966368b074efef5e3ce3ad1e86e8a60bb83e398b39916529b50a1596822756b9308650a7d425c6c639dbec9bde2b76496e56dc08129bb90074a6e7e02156462b00362942dab1f32e73e7a2b980e39647da3b337ea7d17d8d5167d7e9e3884f25d87406466f048f29aedd813fdacef315d974500398cbab0b4a33d11a5d84c2015fb673aaa6e3c6d7ae4c10f586da6e777e71f5fb26d43bc510d66a10293504e5c9e454a9736e9b65f76e005c49312a2681e5236b4d5fb318ad2b8b2927a9286921e1d2ed3d06b1a67183cd92bdd270cf47e50ced63864d17c44051d3ecdd0c64146ee1ecd8ee7910b84895c86af300d48d54f2d425031d405b459ed1d93d177a13afa69cb50a360249d6418cd933fd77e2e206f659addd830de"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x7, 0x3, {0x2, 0x0, 0x1, 0x1, 0xffc}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/4096) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x8000000002, 0x1e, 0xfffffffffffffff9, 0x1000e0, "46da9ddb6ac9d05b88b22d869bc001bb2398dae6698dde653d754a2a75e544ea"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r2, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000014c0)={0x0, 0xfeb, 0x5883, 0x2, 0x80, 0xfb2, 0x8, 0x400, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x7, 0x0, 0x3, 0x5, 0x3}}, &(0x7f0000001340)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001580)={r3, 0x4, 0x10000, 0x3}, &(0x7f00000015c0)=0x10) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000002a80), 0x2) r5 = dup(r2) write$eventfd(r5, &(0x7f0000605ff8), 0x10235) write$eventfd(r5, &(0x7f0000000040), 0xfdc8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x80000000, 0x2, [0x100000000, 0x401]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000012c0)={r6, 0x2}, &(0x7f0000001300)=0xc) writev(r5, &(0x7f00000013c0)=[{&(0x7f0000000380)='T', 0x1}], 0x1) perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x3bc}, 0x10) sendmsg(r8, &(0x7f0000002880)={&(0x7f0000001380)=@ll={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001400)="3db7e165b3ff078b0286b624bd83778bb52d36e49c42866a54fa18225ce83ad6edd6f8d96314c173e51f4622cfe221fdf55e9681694761751fc99dfe22b3ea722fa43da1685846f95e162e8c7ba3d9a656f15741bfd1cb4914717fdb51037555ebff24a21dda07f3f7f18cc86de6c400801e0744c1886004982f0140a4f1a47309d392", 0x83}], 0x1, &(0x7f0000001600)=ANY=[], 0x0, 0x800}, 0x40000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x9e, 0x7e, 0x5) syz_open_dev$mouse(&(0x7f0000001680)='/dev/input/mouse#\x00', 0x6, 0x80) 2018/04/05 22:47:54 executing program 0: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x2000007) dup2(r0, r2) 2018/04/05 22:47:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 22:47:54 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 186.558137] ALSA: seq fatal error: cannot create timer (-22) 2018/04/05 22:47:54 executing program 2: creat(&(0x7f0000001500)='./file0\x00', 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='net/udp\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x401) execveat(0xffffffffffffffff, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8), 0x0) [ 186.632169] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 186.658768] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 186.666179] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:47:54 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000180)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104ff00fd437f0000000000f3050100080006000000fdff00ffff", 0x1f) [ 186.691494] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 186.705684] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 186.713119] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:47:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r4 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)='IPVS\x00', 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000600)="f6136656f2caae235f0ae692946dc8b252712dc9e2551850635d0351a9453e2f4009f5dc0a5fa14141502f0e9322ce8c3921f3704e27672e6eb1", 0x3a, 0x0) keyctl$negate(0xd, r4, 0x7fff, r5) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe807, 0x20, 0xfb, 0x7}, &(0x7f0000000240)=0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000880)=""/225, &(0x7f0000000640)=0xe1) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xa7e, 0x501000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) 2018/04/05 22:47:54 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000180)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104ff00fd437f0000000000f3050100080006000000fdff00ffff", 0x1f) 2018/04/05 22:47:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/160, 0xa0}, {&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/218, 0xda}], 0x5, 0x0) [ 186.770165] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 186.788115] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 186.795476] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:47:54 executing program 2: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r0, r2, 0x0) [ 186.880857] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 186.904508] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 186.912079] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:47:55 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000180)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104ff00fd437f0000000000f3050100080006000000fdff00ffff", 0x1f) 2018/04/05 22:47:55 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f0000000200)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$vnet(r2, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/45, 0x2d, &(0x7f0000000140)=""/45}}, 0x68) close(r1) 2018/04/05 22:47:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 2018/04/05 22:47:55 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00008e3ff8)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000b2e000)='./file0\x00', 0x64) open(&(0x7f0000671ff8)='./file0\x00', 0x0, 0x0) open(&(0x7f000025aff8)='./file0\x00', 0x0, 0x0) 2018/04/05 22:47:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, &(0x7f0000005e00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005b80)=[{{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d40)}}, {{0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005b40)=""/47, 0x2f}}], 0x2, 0x0, &(0x7f0000005e40)={0x0, r1+30000000}) 2018/04/05 22:47:55 executing program 0: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x2000007) dup2(r0, r2) 2018/04/05 22:47:55 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x8000000000088) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/180, 0xb4}, 0x0) bind$inet6(r0, &(0x7f0000726fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/05 22:47:55 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=ANY=[@ANYBLOB="180000001000000000000000000000000500000000000000dc000000200000009500000000000000"], &(0x7f000001bff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000011000)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x47, &(0x7f0000000180)="f885371be8b2c8960ce5702ee0f3", &(0x7f0000000380)=""/71}, 0x28) [ 187.626240] ALSA: seq fatal error: cannot create timer (-22) [ 187.686076] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:47:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc0185879, &(0x7f0000000080)) 2018/04/05 22:47:55 executing program 7: syz_emit_ethernet(0x163, &(0x7f00006a4000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x155, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @empty, "000000081e84d84b2db57b8a0af02ad8c4fda114a6e1200fd51c7ac998963739081ac9863e00c3a144b00263209fd5d31366005e0fba973461c1a98f799e3d94a162efc1763146b22c169c07351b62a1c4bae8590f0bc322d3034fe9dd3e4c4584063a0f35b040fd90300fc409fce43787e45d5627492ffb4cfb282d780c688c3b7986dd839b15e48e2b8930f6dc3bb8490fc3ddc4bbed5116722aa50c9c1288a6d28df4e54bdec1095520dbaf24445a8c903788d8c35162f2f2487f67a18c9c6c7ac1af5dff578d40b6e17c1e9d1aef018d594f3d7ebf1668320566590a043c35a726cadbb9b4bf5ee9d028960fbcaa333c4c8ae0471645de6bc77287666c654fed646b547b12bd5915b9da8d3b3bf44c77ed87a8a96dc2a0d555708993cd0a3ade824cfd54fcd9396f47ebd847f818e5f62dc0585ab785a5"}}}}}, &(0x7f0000000040)={0x0, 0x4000000000000003, [0x8c5, 0xecc, 0x9eb, 0x2]}) 2018/04/05 22:47:55 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100001}, 0x10) 2018/04/05 22:47:55 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) [ 187.730833] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 187.738291] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:47:55 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000940)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000980)=@set_option={0xe, 0x0, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1}}, 0x1c) 2018/04/05 22:47:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000480)='./file0/file1\x00', 0x40000, 0x4) tee(r0, 0xffffffffffffffff, 0x9, 0x4) r1 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r1, 0x0, 0x0, 0x8000) tee(0xffffffffffffffff, r1, 0xfffffffffffffffe, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000240), 0x10001) write(r1, &(0x7f0000000080)="2df1429e179384745ff5d179340d581491a8e6689cb77b9bdb917c11cdbf9dd2f84e0a882fb5aa874f6bae4a671179254a92b5215642c71e19bb4852b0d0f23cdab53ae1bbccd8bb5a2b8d0499520c0e2f5a", 0x52) write(r1, &(0x7f0000001200)="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", 0x1c0) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x82100, 0x80) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) fcntl$setlease(r1, 0x400, 0x2) lseek(r1, 0x58, 0x5) getdents(r2, &(0x7f00000013c0)=""/4096, 0x1000) open(&(0x7f0000000140)='./file0/file0\x00', 0x20000, 0x80000000002) rmdir(&(0x7f0000000200)='./file0/file0\x00') getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000280), &(0x7f00000002c0)=0x4) tee(0xffffffffffffffff, r1, 0x0, 0x8) 2018/04/05 22:47:55 executing program 1: mkdir(&(0x7f00001c6725)='./file0\x00', 0x0) mount(&(0x7f0000a7aff8)='./file0\x00', &(0x7f00009b9ff8)='./file0\x00', &(0x7f0000e53000)='mqueue\x00', 0x0, &(0x7f0000fcefff)) mknod(&(0x7f0000f6d000)='./file0/file0\x00', 0x8003, 0x0) execve(&(0x7f000065cff2)='./file0/file0\x00', &(0x7f0000000fd8), &(0x7f00003ceffc)) 2018/04/05 22:47:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000040)) 2018/04/05 22:47:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 2018/04/05 22:47:56 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/05 22:47:56 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000940)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000980)=@set_option={0xe, 0x0, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1}}, 0x1c) 2018/04/05 22:47:56 executing program 5: fanotify_init(0x0, 0x3) 2018/04/05 22:47:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:47:56 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)="925841d70200641e12a9") 2018/04/05 22:47:56 executing program 4: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0x2, 0x2000000000000400}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)="01") 2018/04/05 22:47:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) 2018/04/05 22:47:56 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000940)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000980)=@set_option={0xe, 0x0, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1}}, 0x1c) 2018/04/05 22:47:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f000020bf9f)=""/97, &(0x7f0000000040)=0x61) [ 188.620610] autofs4:pid:14124:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0x0000937e) [ 188.633170] autofs4:pid:14124:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 2018/04/05 22:47:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000ebdfc8)={&(0x7f0000373000)={0x10}, 0xc, &(0x7f0000579000)={&(0x7f0000d85fc8)=@mpls_getroute={0x1c, 0x1a, 0x101, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 2018/04/05 22:47:56 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/05 22:47:56 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000940)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000980)=@set_option={0xe, 0x0, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1}}, 0x1c) [ 188.772337] autofs4:pid:14133:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0x0000937e) [ 188.784971] autofs4:pid:14133:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 2018/04/05 22:47:56 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vcs\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x100000000000) 2018/04/05 22:47:56 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:56 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x18040, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) 2018/04/05 22:47:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/05 22:47:56 executing program 7: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:56 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/05 22:47:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000480)='./file0/file1\x00', 0x40000, 0x4) tee(r0, 0xffffffffffffffff, 0x9, 0x4) r1 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r1, 0x0, 0x0, 0x8000) tee(0xffffffffffffffff, r1, 0xfffffffffffffffe, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000240), 0x10001) write(r1, &(0x7f0000000080)="2df1429e179384745ff5d179340d581491a8e6689cb77b9bdb917c11cdbf9dd2f84e0a882fb5aa874f6bae4a671179254a92b5215642c71e19bb4852b0d0f23cdab53ae1bbccd8bb5a2b8d0499520c0e2f5a", 0x52) write(r1, &(0x7f0000001200)="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", 0x1c0) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x82100, 0x80) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) fcntl$setlease(r1, 0x400, 0x2) lseek(r1, 0x58, 0x5) getdents(r2, &(0x7f00000013c0)=""/4096, 0x1000) open(&(0x7f0000000140)='./file0/file0\x00', 0x20000, 0x80000000002) rmdir(&(0x7f0000000200)='./file0/file0\x00') getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000280), &(0x7f00000002c0)=0x4) tee(0xffffffffffffffff, r1, 0x0, 0x8) 2018/04/05 22:47:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) [ 189.057559] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 2018/04/05 22:47:57 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vcs\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x100000000000) 2018/04/05 22:47:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000480)='./file0/file1\x00', 0x40000, 0x4) tee(r0, 0xffffffffffffffff, 0x9, 0x4) r1 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r1, 0x0, 0x0, 0x8000) tee(0xffffffffffffffff, r1, 0xfffffffffffffffe, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000240), 0x10001) write(r1, &(0x7f0000000080)="2df1429e179384745ff5d179340d581491a8e6689cb77b9bdb917c11cdbf9dd2f84e0a882fb5aa874f6bae4a671179254a92b5215642c71e19bb4852b0d0f23cdab53ae1bbccd8bb5a2b8d0499520c0e2f5a", 0x52) write(r1, &(0x7f0000001200)="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", 0x1c0) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x82100, 0x80) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) fcntl$setlease(r1, 0x400, 0x2) lseek(r1, 0x58, 0x5) getdents(r2, &(0x7f00000013c0)=""/4096, 0x1000) open(&(0x7f0000000140)='./file0/file0\x00', 0x20000, 0x80000000002) rmdir(&(0x7f0000000200)='./file0/file0\x00') getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000280), &(0x7f00000002c0)=0x4) tee(0xffffffffffffffff, r1, 0x0, 0x8) 2018/04/05 22:47:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) 2018/04/05 22:47:57 executing program 7: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:57 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/05 22:47:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) 2018/04/05 22:47:57 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:57 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:57 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vcs\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x100000000000) 2018/04/05 22:47:57 executing program 6: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:57 executing program 7: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) 2018/04/05 22:47:58 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vcs\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x100000000000) 2018/04/05 22:47:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000480)='./file0/file1\x00', 0x40000, 0x4) tee(r0, 0xffffffffffffffff, 0x9, 0x4) r1 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r1, 0x0, 0x0, 0x8000) tee(0xffffffffffffffff, r1, 0xfffffffffffffffe, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000240), 0x10001) write(r1, &(0x7f0000000080)="2df1429e179384745ff5d179340d581491a8e6689cb77b9bdb917c11cdbf9dd2f84e0a882fb5aa874f6bae4a671179254a92b5215642c71e19bb4852b0d0f23cdab53ae1bbccd8bb5a2b8d0499520c0e2f5a", 0x52) write(r1, &(0x7f0000001200)="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", 0x1c0) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x82100, 0x80) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) fcntl$setlease(r1, 0x400, 0x2) lseek(r1, 0x58, 0x5) getdents(r2, &(0x7f00000013c0)=""/4096, 0x1000) open(&(0x7f0000000140)='./file0/file0\x00', 0x20000, 0x80000000002) rmdir(&(0x7f0000000200)='./file0/file0\x00') getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000280), &(0x7f00000002c0)=0x4) tee(0xffffffffffffffff, r1, 0x0, 0x8) 2018/04/05 22:47:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) 2018/04/05 22:47:58 executing program 7: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:58 executing program 6: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = getgid() lchown(&(0x7f0000000200)='./file0\x00', 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004000)={0xffffffffffffffff, &(0x7f0000007000), &(0x7f0000000000), 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003fec)={0x1, 0x2, 0x4, 0x8}, 0x187) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x81, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, 0x4, 0x1, 0x5, 0x8, &(0x7f0000000480)='teql0\x00', 0x0, 0xc1de, 0x2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x4) fallocate(r3, 0x0, 0x4b99, 0x5) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) sendfile(r4, r4, &(0x7f0000000040), 0x80000001) fallocate(r3, 0x1, 0x0, 0x4000003) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0xc}) sendfile(r4, r3, 0x0, 0xc08f) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x29e) capget(&(0x7f0000000180)={0x0, r5}, &(0x7f00000001c0)={0x9, 0x0, 0x5, 0x1, 0x1ff, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sync() link(&(0x7f0000003980)='./bus\x00', &(0x7f00000039c0)='./file0\x00') lseek(r6, 0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1336, r7}, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1aef, 0x800, 0x304c, 0x5}) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000003940)={0x9, &(0x7f0000000540)=""/241, &(0x7f0000003840)=[{0xffff, 0x54, 0x2, &(0x7f0000000280)=""/84}, {0x6, 0xb, 0x2, &(0x7f0000000140)=""/11}, {0x4, 0xcc, 0x2, &(0x7f0000000640)=""/204}, {0x1, 0x5, 0xffff, &(0x7f00000003c0)=""/5}, {0x8, 0x1f, 0xfffffffffffffffd, &(0x7f0000000440)=""/31}, {0x7, 0x1000, 0xff, &(0x7f0000000740)=""/4096}, {0xffffffffffffff84, 0xd1, 0x100000001, &(0x7f0000001740)=""/209}, {0x0, 0x1000, 0x6, &(0x7f0000001840)=""/4096}, {0x3ff, 0x1000, 0xffffffffffff8001, &(0x7f0000002840)=""/4096}]}) fdatasync(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b40)={r2, &(0x7f0000003a00)="ea315fd8e2ef3cc9358227aa020512552acea19013b68815", &(0x7f0000003a40)=""/239}, 0x18) 2018/04/05 22:47:58 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:58 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0xc, 0x206, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/05 22:47:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/05 22:47:58 executing program 6: socket$alg(0x26, 0x5, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e) r1 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x4, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f000082f000)='./file0\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000004c0)=0x2) readahead(r1, 0x5, 0x10c) userfaultfd(0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$KDSETLED(r3, 0x4b32, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000005c0)={0x80fed, 0xf, 0x0, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x10) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000000280), &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:47:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000001140)="5c6424148ba4eaef6e2ec03f801290c8c08dc970b0170061b576bffca8640f59aaca308e387d2e078071d3f97d7800e3b7c5a4d2", 0x34}], 0x1, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x24000) 2018/04/05 22:47:58 executing program 4: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000eaffffff00002000010000000000000000000000030000000000000000000000000000007f00000000000000679d3a4df6c20ea32501e4a5309a19039fc0db771d38672c835c26509d71f10ba48513f7e691c50000000000000000"], 0x7f) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/05 22:47:58 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000001480)={{0x4000001ff, 0x20100000800009}}) 2018/04/05 22:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x2}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/05 22:47:58 executing program 7: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(r0, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f0000000000), 0x264}, {0x0, 0x0, &(0x7f0000000240), 0x3db}], 0x2, 0x0) 2018/04/05 22:47:59 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) 2018/04/05 22:47:59 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) 2018/04/05 22:47:59 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c0e544", 0x18, 0x40000000003a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0xffffff83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/04/05 22:47:59 executing program 6: mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa6ff7)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) 2018/04/05 22:47:59 executing program 0: madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x0) 2018/04/05 22:47:59 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)="626373663000f0ffffffffffffff00") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000140)=[{r1, 0x585}, {r1}, {r0}], 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@kern={0x10}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') gettid() r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10002) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) connect$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x1, 0x0, 0x3, 0x9, 0x9f, "5287007a6a800e7a03cfc8f52101254d17d174e17d92840be24705df3bb6ef0f1b87581de6ce22326a46cbfe4d0c5f2d7a982414020ffa198c0721faf2fc7c", 0x10}, 0x60) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f00000000c0), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f00009c4000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="0f0ec4c36d4bd7f60f43290f013179002e0d0c000000440f20c0350b000000440f22c0d9e08fe978e2ac7505000000b805000000b9000000000f01d9", 0x3c}], 0x1, 0x40, &(0x7f0000000640)=[@dstype0={0x6}], 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000004c0)=""/81) 2018/04/05 22:47:59 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2101, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x40081, 0x4, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/05 22:47:59 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x0, @empty, 'teql0\x00'}}) 2018/04/05 22:47:59 executing program 7: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/cuse\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000007c0)) accept$ax25(r1, &(0x7f00000005c0), &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfb56e3a2b4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50bf34a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf30394748010a3f5c3601c8886fdfa17663e2ddafbd443a9b79bde2197946eefe3100cd8cc3d20c312e177461c385cd81d1db7fa17798b9aca4e5e276cd5ffd29b2d7e93199b03227462b24eea053d440293d695c46b91c06393477cc20ec63bfdb00eed2aa5c009de7fbfbdb3b8", 0xe8, r2) r3 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000640)="766966ddffffffffffffff00000000") write$vnet(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000400)=""/121, 0x79, &(0x7f0000000480)=""/183, 0x2, 0x2}}, 0x68) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="b33ab760d897c094255cf9fbf6a72319a95779ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd2498b600579f3af3f864e1c324f6928f6672f98f7e149bd61bd78b506e8bd69b02620d72ea326556ce5ce1c0c75d96ac0000000000000007480192b6e519bf7c0b700d89139a40b7fb8e06a9237d7eb0d0cf97621525f940ec3ab0a2430391ad4f096c7fb9140f5a2e1a6cabf9e36b0e640fb93f04da34b1375915fbb9021327479657d2537b47fe15099bcdccb9e423e4210a1e48c1aa88ad42f86c6c7c0e0aacd3324793756cc056f99584fb45b3c31d58797f5836b1f914231306c0f427e0", 0x170, r2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="6300000029391d10e54bfc8ae1ce9311122252ca8994658eddfde468361f0500000056f0b1cbabbe98577623ae3ad6157f224fbf8d44b800699e8c0ee210b4a9eb8ef30160b2ae27628c46613139126235c1228d8fdfb5e18d23b73e2237760c87fb0ed7000000000000000000000000000000000080"], &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000680)={0xd3, 0x7, 0x8000, 0x1, 0xc70, 0x0, 0x7, 0xfffffffffffffe00, r6}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f0100000000000000617400", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0xc0185879, 0x20000000) r8 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x84) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r3, r5, r8}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/05 22:47:59 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c0e544", 0x18, 0x40000000003a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0xffffff83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/04/05 22:47:59 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000dfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000f000)={0x9, 0x0, 0x0, 0x0, "2a5a7aa6e53ff258647a2c1a8eea9f6c6d94820ca1091fcd87f112b28bb336f2fc0f56e07866b5874c098814"}) 2018/04/05 22:47:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000ffc)=0x4) 2018/04/05 22:47:59 executing program 3: unshare(0x24000200) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4000000) 2018/04/05 22:47:59 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000fcf000)="240000001a0025f0006bb4040000001d020b00ff0010b500001000eb080002007fffe5b7", 0x24) 2018/04/05 22:47:59 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c0e544", 0x18, 0x40000000003a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0xffffff83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/04/05 22:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x2, &(0x7f0000000440)=@raw=[@alu], &(0x7f0000000480)='GPL\x00', 0x0, 0x88, &(0x7f00000004c0)=""/136}, 0x48) 2018/04/05 22:48:00 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000dfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000f000)={0x9, 0x0, 0x0, 0x0, "2a5a7aa6e53ff258647a2c1a8eea9f6c6d94820ca1091fcd87f112b28bb336f2fc0f56e07866b5874c098814"}) 2018/04/05 22:48:00 executing program 7: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/cuse\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000007c0)) accept$ax25(r1, &(0x7f00000005c0), &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfb56e3a2b4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50bf34a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf30394748010a3f5c3601c8886fdfa17663e2ddafbd443a9b79bde2197946eefe3100cd8cc3d20c312e177461c385cd81d1db7fa17798b9aca4e5e276cd5ffd29b2d7e93199b03227462b24eea053d440293d695c46b91c06393477cc20ec63bfdb00eed2aa5c009de7fbfbdb3b8", 0xe8, r2) r3 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000640)="766966ddffffffffffffff00000000") write$vnet(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000400)=""/121, 0x79, &(0x7f0000000480)=""/183, 0x2, 0x2}}, 0x68) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="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", 0x170, r2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="6300000029391d10e54bfc8ae1ce9311122252ca8994658eddfde468361f0500000056f0b1cbabbe98577623ae3ad6157f224fbf8d44b800699e8c0ee210b4a9eb8ef30160b2ae27628c46613139126235c1228d8fdfb5e18d23b73e2237760c87fb0ed7000000000000000000000000000000000080"], &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000680)={0xd3, 0x7, 0x8000, 0x1, 0xc70, 0x0, 0x7, 0xfffffffffffffe00, r6}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f0100000000000000617400", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0xc0185879, 0x20000000) r8 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x84) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r3, r5, r8}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/05 22:48:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d, r1}, 0x10, &(0x7f0000012000)={&(0x7f0000000040)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/04/05 22:48:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)={0x8}, 0x0) 2018/04/05 22:48:00 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c0e544", 0x18, 0x40000000003a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0xffffff83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/04/05 22:48:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="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", 0x218, 0x8000, &(0x7f0000000000)={0xa}, 0x1c) close(r0) 2018/04/05 22:48:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:00 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000dfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000f000)={0x9, 0x0, 0x0, 0x0, "2a5a7aa6e53ff258647a2c1a8eea9f6c6d94820ca1091fcd87f112b28bb336f2fc0f56e07866b5874c098814"}) [ 192.476424] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 22:48:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8b) 2018/04/05 22:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x2, &(0x7f0000000440)=@raw=[@alu], &(0x7f0000000480)='GPL\x00', 0x0, 0x88, &(0x7f00000004c0)=""/136}, 0x48) 2018/04/05 22:48:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)={0x8}, 0x0) 2018/04/05 22:48:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d, r1}, 0x10, &(0x7f0000012000)={&(0x7f0000000040)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) [ 192.529781] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 22:48:00 executing program 7: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/cuse\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000007c0)) accept$ax25(r1, &(0x7f00000005c0), &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfb56e3a2b4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50bf34a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf30394748010a3f5c3601c8886fdfa17663e2ddafbd443a9b79bde2197946eefe3100cd8cc3d20c312e177461c385cd81d1db7fa17798b9aca4e5e276cd5ffd29b2d7e93199b03227462b24eea053d440293d695c46b91c06393477cc20ec63bfdb00eed2aa5c009de7fbfbdb3b8", 0xe8, r2) r3 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000640)="766966ddffffffffffffff00000000") write$vnet(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000400)=""/121, 0x79, &(0x7f0000000480)=""/183, 0x2, 0x2}}, 0x68) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="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", 0x170, r2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="6300000029391d10e54bfc8ae1ce9311122252ca8994658eddfde468361f0500000056f0b1cbabbe98577623ae3ad6157f224fbf8d44b800699e8c0ee210b4a9eb8ef30160b2ae27628c46613139126235c1228d8fdfb5e18d23b73e2237760c87fb0ed7000000000000000000000000000000000080"], &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000680)={0xd3, 0x7, 0x8000, 0x1, 0xc70, 0x0, 0x7, 0xfffffffffffffe00, r6}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f0100000000000000617400", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0xc0185879, 0x20000000) r8 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x84) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r3, r5, r8}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/05 22:48:00 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000dfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000f000)={0x9, 0x0, 0x0, 0x0, "2a5a7aa6e53ff258647a2c1a8eea9f6c6d94820ca1091fcd87f112b28bb336f2fc0f56e07866b5874c098814"}) 2018/04/05 22:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x2, &(0x7f0000000440)=@raw=[@alu], &(0x7f0000000480)='GPL\x00', 0x0, 0x88, &(0x7f00000004c0)=""/136}, 0x48) 2018/04/05 22:48:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d, r1}, 0x10, &(0x7f0000012000)={&(0x7f0000000040)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/04/05 22:48:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8b) 2018/04/05 22:48:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)={0x8}, 0x0) 2018/04/05 22:48:00 executing program 7: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/cuse\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000007c0)) accept$ax25(r1, &(0x7f00000005c0), &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfb56e3a2b4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50bf34a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf30394748010a3f5c3601c8886fdfa17663e2ddafbd443a9b79bde2197946eefe3100cd8cc3d20c312e177461c385cd81d1db7fa17798b9aca4e5e276cd5ffd29b2d7e93199b03227462b24eea053d440293d695c46b91c06393477cc20ec63bfdb00eed2aa5c009de7fbfbdb3b8", 0xe8, r2) r3 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000640)="766966ddffffffffffffff00000000") write$vnet(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000400)=""/121, 0x79, &(0x7f0000000480)=""/183, 0x2, 0x2}}, 0x68) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="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", 0x170, r2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="6300000029391d10e54bfc8ae1ce9311122252ca8994658eddfde468361f0500000056f0b1cbabbe98577623ae3ad6157f224fbf8d44b800699e8c0ee210b4a9eb8ef30160b2ae27628c46613139126235c1228d8fdfb5e18d23b73e2237760c87fb0ed7000000000000000000000000000000000080"], &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000680)={0xd3, 0x7, 0x8000, 0x1, 0xc70, 0x0, 0x7, 0xfffffffffffffe00, r6}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f0100000000000000617400", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0xc0185879, 0x20000000) r8 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x84) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r3, r5, r8}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/05 22:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x2, &(0x7f0000000440)=@raw=[@alu], &(0x7f0000000480)='GPL\x00', 0x0, 0x88, &(0x7f00000004c0)=""/136}, 0x48) 2018/04/05 22:48:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000000140)=@generic={0x1e, "013aa19cfffe87654d018381db4d7d41156ab05dc0f8a4c8350429745646d16930d4406f5d28cfe6ae43400f978c03037984081abd21dbb57b649349ccaedb2bdcb48a277a8695f91ac7679407bd95d61cad9d9164251c2f7c7bb65b0f663b148f97c9c09c7aeddb250d36f3a07a179d07831bcd9718ce241648b9edfb34"}, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000001c0)}, 0x0) [ 192.873506] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 22:48:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8b) 2018/04/05 22:48:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d, r1}, 0x10, &(0x7f0000012000)={&(0x7f0000000040)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/04/05 22:48:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)={0x8}, 0x0) 2018/04/05 22:48:00 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) [ 192.931182] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/05 22:48:00 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1) 2018/04/05 22:48:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000fcbfff)='X', &(0x7f0000172000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000)}, 0x20) 2018/04/05 22:48:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8b) 2018/04/05 22:48:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) 2018/04/05 22:48:00 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x201) write(r0, &(0x7f0000214ffb)="53000000ff", 0x5) 2018/04/05 22:48:00 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acf50604050dadfd2f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/05 22:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x8, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 193.162815] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 22:48:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$int_out(r0, 0x2, &(0x7f00000002c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000000)) getpeername(r1, &(0x7f0000000300)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x80) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080), &(0x7f0000000040)=0x4) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x2a00) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, [0x0, 0x4e2, 0x6, 0xfff, 0x1, 0x9, 0x0, 0xfffffffffffffeff, 0x1, 0x1000, 0x7f57, 0x8, 0x8, 0x101]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x6}, &(0x7f0000000280)=0x8) 2018/04/05 22:48:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) [ 193.243474] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/05 22:48:01 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/04/05 22:48:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x2b}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/04/05 22:48:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x100, 0x2}) 2018/04/05 22:48:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) clock_gettime(0x4, &(0x7f0000000280)) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)={r4, 0x80000000}) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x0, 0x7, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x984, 0x9, 0x39, 0x8b}, &(0x7f0000001200)={0x0, 0x40, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$urandom(&(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x800) 2018/04/05 22:48:01 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x2, &(0x7f0000001d80), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'syz_tun\x00', 'irlan0\x00', 'syzkaller1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x120, 0x120, 0x250, [@rateest={'rateest\x00', 0x48, {{'lo\x00', 'gretap0\x00', 0x14, 0x1}}}, @devgroup={'devgroup\x00', 0x18}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:event_device_t:s0\x00'}}}}]}]}, 0x2f8) 2018/04/05 22:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x8, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:48:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) [ 194.181524] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 194.198877] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/05 22:48:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) [ 194.242367] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 22:48:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f00000001c0)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 2018/04/05 22:48:02 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0xc, 0x1, 'user{\x00'}]}, @IFLA_MASTER={0x8, 0xa}]}, 0x38}, 0x1}, 0x0) 2018/04/05 22:48:02 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000014fdc)="24000000000207031dfffd946fa2830020200a0009000200001d85680c1ba3a204000300", 0x24}], 0x1}, 0x0) 2018/04/05 22:48:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3855}) 2018/04/05 22:48:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x4000000000000000}]}) 2018/04/05 22:48:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(r0, 0x0) 2018/04/05 22:48:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x8, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:48:02 executing program 1: r0 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setstatus(r1, 0x4, 0x2400) 2018/04/05 22:48:02 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="240000005200912507fffd946fa200000200000000000000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000003440)}}], 0x1, 0x0, 0x0) 2018/04/05 22:48:02 executing program 7: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x3a, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 2018/04/05 22:48:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(r0, 0x0) 2018/04/05 22:48:02 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x0) 2018/04/05 22:48:02 executing program 5: syz_emit_ethernet(0x2a, &(0x7f00006ba000)={@empty, @random="e2701bb60589", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000ea3000)={0x0, 0x4, [0x0, 0xe4e]}) 2018/04/05 22:48:02 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 2018/04/05 22:48:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(r0, 0x0) 2018/04/05 22:48:02 executing program 7: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)}, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/04/05 22:48:02 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x8a1000, 0x0) rt_sigsuspend(&(0x7f0000000300), 0x8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000b76000)='./file1\x00') 2018/04/05 22:48:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180)=0xfffffffffffffffc, 0x4) 2018/04/05 22:48:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) mknod$loop(&(0x7f0000000240)='./file0/fil.0\x00', 0x0, 0xffffffffffffffff) 2018/04/05 22:48:03 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/04/05 22:48:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(r0, 0x0) 2018/04/05 22:48:03 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000380)={"62cb3a350200000000000000000800"}) 2018/04/05 22:48:03 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000058001f0014b2f45eeb2b7b070009b43004000200071007eb0100ffffffff0800", 0x24) 2018/04/05 22:48:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) mknod$loop(&(0x7f0000000240)='./file0/fil.0\x00', 0x0, 0xffffffffffffffff) 2018/04/05 22:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x8, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:48:03 executing program 2: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)=ANY=[@ANYBLOB='x']) fallocate(r0, 0x3, 0x0, 0x6) 2018/04/05 22:48:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4}, {}, {}], 0x3, 0x0) memfd_create(&(0x7f0000000080)='\x00', 0x0) [ 196.408205] netlink: 'syz-executor7': attribute type 2 has an invalid length. 2018/04/05 22:48:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee), 0x209, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/05 22:48:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a), 0x0) r2 = accept$alg(r0, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001f40)="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", 0xf50}], 0x1) recvmsg(r2, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) 2018/04/05 22:48:04 executing program 6: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/207, 0xcf, 0x0) 2018/04/05 22:48:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/04/05 22:48:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) mknod$loop(&(0x7f0000000240)='./file0/fil.0\x00', 0x0, 0xffffffffffffffff) 2018/04/05 22:48:04 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, &(0x7f0000778ffc)=0x100000001, 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000440000), 0xffe6, 0x0, &(0x7f00002ce000)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)}, 0x2101) 2018/04/05 22:48:04 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x0) 2018/04/05 22:48:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x20000089f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000040)}}) socket$inet(0x2, 0x0, 0x0) 2018/04/05 22:48:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x38}, 0x1}, 0x0) 2018/04/05 22:48:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) mknod$loop(&(0x7f0000000240)='./file0/fil.0\x00', 0x0, 0xffffffffffffffff) 2018/04/05 22:48:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000dc5f98)={0x0, 0x0, 0x0, {0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0xb6, 0x40, {r1}}) 2018/04/05 22:48:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x1000}) 2018/04/05 22:48:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10000000000000a) write(r0, &(0x7f000077f000), 0xfd1f) 2018/04/05 22:48:05 executing program 7: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x646]}) 2018/04/05 22:48:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:05 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/04/05 22:48:05 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f000033c000), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/05 22:48:05 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) 2018/04/05 22:48:05 executing program 7: r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(0xffffffffffffffff, r0) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92151fc33a454f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f00000001c0)=""/92, &(0x7f0000000240)=0x5c) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0)=0x8cb, 0x1, 0x3) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @connect}], 0x30) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000001) 2018/04/05 22:48:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x38}, 0x1}, 0x0) 2018/04/05 22:48:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dd9fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00009d4000)={0x0, 0xfffffffffffffffc, 0x0, 0x0, "f24929d550c69ba4e740cd8d07956adffbb9567a489a3743739d580259ed37de"}) [ 198.069189] IPVS: ftp: loaded support on port[0] = 21 [ 198.605305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.367904] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 199.374046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.447793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/04/05 22:48:07 executing program 4: r0 = memfd_create(&(0x7f0000002901)='#-\x00', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000002000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfed) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000004, 0x11, r0, 0x0) mq_unlink(&(0x7f0000001000)='dev ') 2018/04/05 22:48:07 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f000033c000), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/05 22:48:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x38}, 0x1}, 0x0) 2018/04/05 22:48:07 executing program 1: mmap(&(0x7f0000000000/0xdc8000)=nil, 0xdc8000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x100000114, 0x2719, &(0x7f0000000000)=""/40, &(0x7f000090effc)=0x28) 2018/04/05 22:48:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000191000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f00008a5000)='coredump_filter\x00') sendfile(r1, r0, &(0x7f0000000040)=0x2, 0x7fff) 2018/04/05 22:48:07 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 199.521787] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.527971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.544184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/05 22:48:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x38}, 0x1}, 0x0) 2018/04/05 22:48:07 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) fallocate(r0, 0x1, 0x0, 0x4000003) readv(r0, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/4096, 0xffc4}], 0x1) sendfile(r0, r0, 0x0, 0x6) 2018/04/05 22:48:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0x1}, {0xa, 0x8}]}) 2018/04/05 22:48:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000191000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f00008a5000)='coredump_filter\x00') sendfile(r1, r0, &(0x7f0000000040)=0x2, 0x7fff) 2018/04/05 22:48:07 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f000033c000), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/05 22:48:07 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:07 executing program 1: perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000480)=[{&(0x7f0000000440)=""/39, 0x27}], 0x1, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000780)=""/142, 0x8e}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/169, 0xa9}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f0000000bc0)=""/48, 0x30}], 0x9, 0x0) 2018/04/05 22:48:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r0) 2018/04/05 22:48:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000191000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f00008a5000)='coredump_filter\x00') sendfile(r1, r0, &(0x7f0000000040)=0x2, 0x7fff) 2018/04/05 22:48:07 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f000033c000), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/05 22:48:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x1) 2018/04/05 22:48:08 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) fchmod(r0, 0x0) 2018/04/05 22:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00001b3000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000005c0)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000600)={0x0, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)) r4 = epoll_create1(0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00005efffc), 0x4) sendto(r5, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg$netrom(r5, &(0x7f000060b000)={&(0x7f0000789fb8)=@full={{0x3, {"ec500ab3427332"}}, [{"2a15df8b8a0040"}, {"bac04ae178a108"}, {"f5913b3892396a"}, {"b79380eeea8ce7"}, {"54afba5e82cd9d"}, {"c6c264886968a6"}, {"82ca99da4d8cc6"}, {"f56bc9c4a26950"}]}, 0x48, &(0x7f0000626000), 0x0, &(0x7f0000ebbeb8)}, 0x40012062) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000004c0)) r6 = eventfd2(0x6, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)) add_key(&(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000780)="6afcbdd03abb2c5b0949148d12f01778a0aed22674be9efb26", 0x19, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x220040, 0x104) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, r8) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000240)={0xffff, 0x40, 0x6, 0x200}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580), 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000280)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x323) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000340)=""/107, &(0x7f00000003c0)=0x6b) 2018/04/05 22:48:08 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/04/05 22:48:08 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="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", 0x5b5}], 0x1, &(0x7f0000000a80)}}], 0x2, 0x0) 2018/04/05 22:48:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r1 = open(&(0x7f0000000280)='./file0/file0\x00', 0x4001, 0x0) ftruncate(r1, 0x80) 2018/04/05 22:48:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000191000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f00008a5000)='coredump_filter\x00') sendfile(r1, r0, &(0x7f0000000040)=0x2, 0x7fff) 2018/04/05 22:48:08 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/04/05 22:48:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/05 22:48:08 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2f]}, 0x1) 2018/04/05 22:48:08 executing program 4: r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x1a, @tick=0xffffffff}) 2018/04/05 22:48:08 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/05 22:48:08 executing program 0: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) fstat(r0, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f00005d6000)) 2018/04/05 22:48:08 executing program 1: r0 = socket(0x10, 0x802, 0x4) sendmsg$nl_route(r0, &(0x7f0000001680)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000003c0)=@setlink={0x4c, 0x13, 0x50b, 0x0, 0x0, {}, [@IFLA_XDP={0x4, 0x2b}, @IFLA_IFALIAS={0x14, 0x14, 'erspan0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x4c}, 0x1}, 0x0) 2018/04/05 22:48:08 executing program 2: r0 = socket$inet6(0xa, 0x800000000000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) 2018/04/05 22:48:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x28, 0x80000000000027, 0x1ff307543bf68163, 0x0, 0x0, {0x9}, [@typed={0x14, 0x4, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, 0x28}, 0x1}, 0x0) 2018/04/05 22:48:08 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x3000, 0xfffffffffffffe20) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x6e8000}) 2018/04/05 22:48:08 executing program 4: r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x1a, @tick=0xffffffff}) 2018/04/05 22:48:08 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/05 22:48:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/05 22:48:08 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) [ 200.788203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/05 22:48:08 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}]}, &(0x7f0000f91ffc)=0xfffffffffffffd67) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x2a}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/05 22:48:08 executing program 4: r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x1a, @tick=0xffffffff}) [ 201.283979] binder: release 14986:14989 transaction 29 out, still active [ 201.291091] binder: release 14986:14989 transaction 28 in, still active [ 201.297875] binder: undelivered TRANSACTION_COMPLETE [ 201.303903] binder: 14986:14989 ioctl c0306201 20004000 returned -14 [ 201.304189] binder: BINDER_SET_CONTEXT_MGR already set [ 201.315840] binder: 14986:15063 ioctl 40046207 0 returned -16 [ 201.326554] binder_alloc: 14986: binder_alloc_buf, no vma [ 201.332395] binder_alloc: 14986: binder_alloc_buf, no vma [ 201.332420] binder: 14986:15063 transaction failed 29189/-3, size 0-0 line 2963 [ 201.338015] binder: 14986:15065 transaction failed 29189/-3, size 0-0 line 2963 [ 201.363737] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.369297] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.375349] binder: release 14986:15063 transaction 28 out, still active 2018/04/05 22:48:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/05 22:48:08 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0xfffffefa) r1 = syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x20000000000002ac, &(0x7f0000000140)}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/05 22:48:08 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/05 22:48:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x2}}]}, 0x2c}, 0x1}, 0x0) 2018/04/05 22:48:08 executing program 4: r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x1a, @tick=0xffffffff}) 2018/04/05 22:48:08 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/05 22:48:08 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000500)=&(0x7f0000000380)) 2018/04/05 22:48:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{}, 'port1\x00'}) [ 201.382265] binder: undelivered TRANSACTION_COMPLETE [ 201.387423] binder: send failed reply for transaction 29, target dead [ 201.394057] binder: send failed reply for transaction 28, target dead 2018/04/05 22:48:09 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) [ 201.439312] netlink: 'syz-executor0': attribute type 21 has an invalid length. [ 201.477134] binder_alloc: binder_alloc_mmap_handler: 15074 20000000-20001000 already mapped failed -16 2018/04/05 22:48:09 executing program 4: renameat2(0xffffffffffffffff, &(0x7f00001f4ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000aaf000)='./file0\x00', 0x0) mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) madvise(&(0x7f0000b72000/0x1000)=nil, 0x1000, 0x10200000008) 2018/04/05 22:48:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/05 22:48:09 executing program 0: r0 = gettid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f000075ef4e)=""/178, 0xb2}], 0x1000000000000363, &(0x7f000088efe0)=[{&(0x7f0000000040)=""/83, 0xfffffe83}], 0x1, 0x0) 2018/04/05 22:48:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/05 22:48:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f00001fb000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00003d8000)=@ipv6_newroute={0x1c, 0x18, 0x915, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}, 0x1}, 0x0) 2018/04/05 22:48:09 executing program 2: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x34]}, 0x2c}]}}) 2018/04/05 22:48:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x7dbc) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000400)) [ 201.681264] IPv6: Can't replace route, no match found [ 201.713343] XFS (loop2): invalid log iosize: 2 [not 12-30] [ 201.713450] IPv6: Can't replace route, no match found [ 201.746354] XFS (loop2): invalid log iosize: 2 [not 12-30] [ 202.254393] binder: release 15078:15082 transaction 34 out, still active [ 202.261377] binder: release 15078:15082 transaction 33 in, still active [ 202.268194] binder: undelivered TRANSACTION_COMPLETE [ 202.283270] binder: release 15078:15141 transaction 33 out, still active [ 202.290168] binder: undelivered TRANSACTION_COMPLETE [ 202.295326] binder: send failed reply for transaction 34, target dead 2018/04/05 22:48:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/05 22:48:09 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'G6v', 0x44, 0x2c, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000040)={0x0, 0x800, [0x0, 0x1df]}) 2018/04/05 22:48:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/05 22:48:09 executing program 2: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x34]}, 0x2c}]}}) 2018/04/05 22:48:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x14, 0x22, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:09 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file1\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f00000004c0)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000753000)="00000200", 0x5010, &(0x7f0000000380)) 2018/04/05 22:48:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x0) 2018/04/05 22:48:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x7dbc) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000400)) [ 202.301939] binder: send failed reply for transaction 33, target dead 2018/04/05 22:48:09 executing program 4: socket(0x11, 0x4000000000080002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/packet\x00') read(r0, &(0x7f0000000080)=""/60, 0x3c) [ 202.343175] XFS (loop2): invalid log iosize: 2 [not 12-30] 2018/04/05 22:48:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f0000b3a000)=[{r1}], 0x1, &(0x7f0000982000)={0x0, 0x1c9c380}, &(0x7f0000660ff8), 0x8) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/05 22:48:09 executing program 5: r0 = socket(0x10, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ifb0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000340)={@pi={0x0, 0xd}, @void, @ipv6={0x0, 0x6, "2d56cc", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x40) 2018/04/05 22:48:10 executing program 2: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x34]}, 0x2c}]}}) 2018/04/05 22:48:10 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000c29ffc)=0x20000003, 0x4) 2018/04/05 22:48:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5381, &(0x7f0000000040)) 2018/04/05 22:48:10 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) r1 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getpgrp(0x0) r4 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x9, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2"}) shmctl$SHM_LOCK(r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000540)={0x8, 0x8, 0x0, 0x10001, 0x3, 0xd86b}) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r6) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x2000000}}, 0xe8) connect$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x440, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000300)=0x2b5) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr=0x7, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0xff, r8, r2}, {0x1, 0x3d, 0x398cd27c, 0x100000001, 0x2, 0x10000, 0xfede, 0x4}, {0x0, 0x0, 0x0, 0x400}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d3, 0x7c}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x3f, 0x8}}, 0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={r8, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x8, 0x6}, {0x3, 0x5}, 0x8, 0x4, 0x6}) close(r3) close(r3) [ 202.501490] PF_CAN: dropped non conform CAN FD skbuf: dev type 65534, len 60, datalen 0 [ 202.536937] XFS (loop2): invalid log iosize: 2 [not 12-30] 2018/04/05 22:48:10 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000b87000)=[{{&(0x7f00001abff0)=@ethernet={0x0, @dev}, 0x10, &(0x7f0000b8fff8), 0x0, &(0x7f0000a4e000)=""/25, 0x19}}, {{0x0, 0x0, &(0x7f0000e0d000)=[{&(0x7f0000a52f07)=""/249, 0xf9}], 0x1, &(0x7f00006f0000)=""/162, 0xa2}}], 0x2, 0x0, &(0x7f0000b50000)={0x0, 0x989680}) [ 203.162855] binder: release 15160:15161 transaction 37 out, still active [ 203.169848] binder: release 15160:15161 transaction 36 in, still active [ 203.176646] binder: undelivered TRANSACTION_COMPLETE [ 203.199187] binder: release 15160:15203 transaction 36 out, still active [ 203.206151] binder: undelivered TRANSACTION_COMPLETE [ 203.211304] binder: send failed reply for transaction 37, target dead [ 203.217930] binder: send failed reply for transaction 36, target dead 2018/04/05 22:48:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/05 22:48:13 executing program 5: prctl$intptr(0x17, 0x0) 2018/04/05 22:48:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5381, &(0x7f0000000040)) 2018/04/05 22:48:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x7dbc) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000400)) 2018/04/05 22:48:13 executing program 2: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x34]}, 0x2c}]}}) 2018/04/05 22:48:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2, &(0x7f0000000040)=""/30, &(0x7f0000000000)=0x1e) 2018/04/05 22:48:13 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) r1 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getpgrp(0x0) r4 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x9, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2"}) shmctl$SHM_LOCK(r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000540)={0x8, 0x8, 0x0, 0x10001, 0x3, 0xd86b}) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r6) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x2000000}}, 0xe8) connect$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x440, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000300)=0x2b5) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr=0x7, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0xff, r8, r2}, {0x1, 0x3d, 0x398cd27c, 0x100000001, 0x2, 0x10000, 0xfede, 0x4}, {0x0, 0x0, 0x0, 0x400}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d3, 0x7c}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x3f, 0x8}}, 0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={r8, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x8, 0x6}, {0x3, 0x5}, 0x8, 0x4, 0x6}) close(r3) close(r3) 2018/04/05 22:48:13 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100000003fd, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000016c0)=[{&(0x7f0000001640)='l', 0x1}], 0x1, 0x0) close(r0) fdatasync(r1) 2018/04/05 22:48:13 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = memfd_create(&(0x7f0000000440)='\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'bpq0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="7f90b4e07d28ff6651b3aa5897a8e9e717f9dd4e37c7bfe534cc57", 0x1b, 0x800, &(0x7f0000000540)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r4}, &(0x7f0000000140)=0x51) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r3, &(0x7f00000003c0)={r3, 0xffffffffffffffff, 0xffffffff}) sendfile(r2, r2, &(0x7f0000000080)=0x5f, 0x102000004) 2018/04/05 22:48:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5381, &(0x7f0000000040)) 2018/04/05 22:48:13 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0x17ffc, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x10001}) [ 206.202557] XFS (loop2): invalid log iosize: 2 [not 12-30] 2018/04/05 22:48:13 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) r1 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getpgrp(0x0) r4 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x9, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2"}) shmctl$SHM_LOCK(r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000540)={0x8, 0x8, 0x0, 0x10001, 0x3, 0xd86b}) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r6) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x2000000}}, 0xe8) connect$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x440, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000300)=0x2b5) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr=0x7, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0xff, r8, r2}, {0x1, 0x3d, 0x398cd27c, 0x100000001, 0x2, 0x10000, 0xfede, 0x4}, {0x0, 0x0, 0x0, 0x400}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d3, 0x7c}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x3f, 0x8}}, 0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={r8, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x8, 0x6}, {0x3, 0x5}, 0x8, 0x4, 0x6}) close(r3) close(r3) 2018/04/05 22:48:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5381, &(0x7f0000000040)) 2018/04/05 22:48:14 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) r1 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getpgrp(0x0) r4 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x9, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2"}) shmctl$SHM_LOCK(r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000540)={0x8, 0x8, 0x0, 0x10001, 0x3, 0xd86b}) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r6) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x2000000}}, 0xe8) connect$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x440, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000300)=0x2b5) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr=0x7, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0xff, r8, r2}, {0x1, 0x3d, 0x398cd27c, 0x100000001, 0x2, 0x10000, 0xfede, 0x4}, {0x0, 0x0, 0x0, 0x400}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d3, 0x7c}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x3f, 0x8}}, 0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={r8, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x8, 0x6}, {0x3, 0x5}, 0x8, 0x4, 0x6}) close(r3) close(r3) 2018/04/05 22:48:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) shutdown(r0, 0x1) 2018/04/05 22:48:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000588fff), 0xffffffffffffff3e, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) connect(r0, &(0x7f00003cd000)=@ethernet, 0x10) [ 206.977596] binder: release 15213:15216 transaction 40 out, still active [ 206.984545] binder: release 15213:15216 transaction 39 in, still active [ 206.992464] binder: undelivered TRANSACTION_COMPLETE [ 207.014740] binder: release 15213:15256 transaction 39 out, still active [ 207.021664] binder: undelivered TRANSACTION_COMPLETE [ 207.026817] binder: send failed reply for transaction 40, target dead [ 207.033452] binder: send failed reply for transaction 39, target dead 2018/04/05 22:48:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x7dbc) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000400)) 2018/04/05 22:48:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/05 22:48:15 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000cadff1)='/dev/sequencer\x00', 0x8002, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00003c6000)="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", 0x18c}], 0x1) 2018/04/05 22:48:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/05 22:48:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) shutdown(r0, 0x1) 2018/04/05 22:48:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x20000e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') pread64(r0, &(0x7f0000000080), 0xfec8, 0x0) 2018/04/05 22:48:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/191, 0xbf}], 0x1) 2018/04/05 22:48:15 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/05 22:48:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6}}, 0xe8) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 2018/04/05 22:48:15 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/05 22:48:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x10, 0x8000000000004, 0x4, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 2018/04/05 22:48:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f000001d000)={0x0, 0x0, 0x0, 0x880}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x1fe000000}) 2018/04/05 22:48:15 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x227) munmap(&(0x7f0000012000/0x1000)=nil, 0x1000) dup2(r0, r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, [0xff, 0x7, 0x800, 0x0, 0x3, 0x1, 0x24000000000, 0x101, 0x3f, 0x5, 0xd5, 0x6, 0x200, 0x1ff, 0x81]}, &(0x7f0000000440)=0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl(0x1003, &(0x7f0000000280)="7bef689096331073a3b1c28bb96b3d59844b50d108ef4352f58c4a0fabcd14fd4cfe8c5e06fba6535890b8abf8d2ec591c169d11c883fdd0c2acfc0be1bec1cb8a3a8d9893828be2a5506496139247eb719ebbdffcc08bbdc6fcf910eeb3dc1fa11f5c76232106") sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040001}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@dellink={0x3c, 0x11, 0x1, 0x70bd29, 0xb, {0x0, 0x0, 0x0, r3, 0x21800, 0x8000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xfffffffffffffff7}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "b7eaa8d0e070a82b2940f54471f4ec9d"}]}, 0x3c}, 0x1}, 0x40000) gettid() 2018/04/05 22:48:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) shutdown(r0, 0x1) 2018/04/05 22:48:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000eaffffffffffffff028000006a3cecbd58d83338620a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1caef1ee9cdd4bcfba03fdf9c07c9a1800d0f74d9c00e071c3"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/05 22:48:15 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 2018/04/05 22:48:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6}}, 0xe8) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 2018/04/05 22:48:16 executing program 2: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) shutdown(r0, 0x1) 2018/04/05 22:48:16 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='.', &(0x7f0000000280)='debugfs\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) chroot(&(0x7f0000000080)='../file0\x00') pivot_root(&(0x7f00000001c0)='.', &(0x7f0000000200)='..') 2018/04/05 22:48:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x14, 0x13, 0x21}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:16 executing program 3: timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000337ff2)='timers\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x200) 2018/04/05 22:48:16 executing program 0: prctl$intptr(0x1d, 0xfffffffffffff2fd) 2018/04/05 22:48:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xb8, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xb8}, 0x1}, 0x0) [ 208.762658] bridge0: port 1(erspan0) entered blocking state [ 208.768482] bridge0: port 1(erspan0) entered disabled state 2018/04/05 22:48:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x112, &(0x7f0000000440)=ANY=[]) r0 = open(&(0x7f0000000640)='./file0/file0\x00', 0x40003ffd, 0x0) ftruncate(r0, 0x7) 2018/04/05 22:48:16 executing program 3: r0 = creat(&(0x7f00008b2000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000d9ffec)="0000000201000000000000010400000000000000", 0x14, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='security.capability\x00') [ 208.814505] device erspan0 entered promiscuous mode 2018/04/05 22:48:16 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xffffffffffffffeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c39fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 22:48:16 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/05 22:48:16 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x125, 0x10000}], 0x0, &(0x7f0000016000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000012c0)={0x3, 0x337e, 0x0, 0x9, 0x3, 0x2, 0x4, 0x7fff, r5}, &(0x7f0000001300)=0x20) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r2, 0x20}, {r0, 0x1}, {r0, 0x8002}], 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 208.848995] bridge0: port 1(erspan0) entered blocking state [ 208.855082] bridge0: port 1(erspan0) entered forwarding state [ 208.941332] FAT-fs (loop1): bogus number of reserved sectors [ 208.947241] FAT-fs (loop1): Can't find a valid FAT filesystem [ 208.966832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.973400] BTRFS: device fsid 3030b86e-0d5f-4090-902c-6457136cf04d devid 1 transid 7 /dev/loop4 [ 209.023587] FAT-fs (loop1): bogus number of reserved sectors [ 209.029640] FAT-fs (loop1): Can't find a valid FAT filesystem [ 209.064077] BTRFS error (device loop4): superblock checksum mismatch [ 209.095786] BTRFS error (device loop4): open_ctree failed [ 209.131517] BTRFS error (device loop4): superblock checksum mismatch [ 209.139855] BTRFS error (device loop4): open_ctree failed 2018/04/05 22:48:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6}}, 0xe8) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 2018/04/05 22:48:17 executing program 3: r0 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0xc) 2018/04/05 22:48:17 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)) 2018/04/05 22:48:17 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xffffffffffffffeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c39fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 22:48:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000577000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000006af79), 0x0) sendmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f00000028c0)=@nl=@unspec, 0xc, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)}}, {{&(0x7f0000002d40)=@nl=@unspec, 0xc, &(0x7f0000002e00), 0x0, &(0x7f0000002e40)}}], 0x2, 0x0) 2018/04/05 22:48:17 executing program 7: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{&(0x7f0000000240)="0ece8cf725415d7bd94e90647dec69a33f7a58a060bbccf20918de6661614db1a1ef52910ec7b2f899da1e2ad97b92af29ece8b4230f4caa23af482259af32741718ecb994693afc08217417811a4c5ee136bba270439824a638890d819e38764a3d5826682d5aae2d8fd12d2bdcbb0b3ea684190f5181c469cde726e6b343ef512bcdbc85769e3482126ecd1a51939c63a7325c196e91888b3761ed60624ab6babce599165a967a633c", 0xaa, 0x9}, {&(0x7f0000001300)="20aadb40ccdab17a9e6a5d6271bde618094f02f6cb2c035fac09e6688509857f90aef38c2ff50d54a3371cfe8fee8d9cf87af2a2a08924ba31ccb097471e1bc69ac22436445aa977cabd1d46b578d18b2b545c847175dc594a14ec0294773bb20bc728b62ab613a8f3b021", 0x6b, 0x11}], 0x804404, &(0x7f0000001400)={'nouuid,', {[{@ikeep='ikeep', 0x2c}, {@uqnoenforce='uqnoenforce', 0x2c}, {@attr2='attr2', 0x2c}, {@pqnoenforce='pqnoenforce', 0x2c}, {@allocsize={'allocsize', 0x3d, [0x33, 0x67]}, 0x2c}, {@prjquota='prjquota', 0x2c}, {@ikeep='ikeep', 0x2c}, {@swalloc='swalloc', 0x2c}, {@nogrpid='nogrpid', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}}) 2018/04/05 22:48:17 executing program 2: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:17 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x125, 0x10000}], 0x0, &(0x7f0000016000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000012c0)={0x3, 0x337e, 0x0, 0x9, 0x3, 0x2, 0x4, 0x7fff, r5}, &(0x7f0000001300)=0x20) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r2, 0x20}, {r0, 0x1}, {r0, 0x8002}], 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/04/05 22:48:17 executing program 3: r0 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0xc) [ 209.703536] BTRFS error (device loop4): superblock checksum mismatch [ 209.734959] XFS (loop7): Invalid superblock magic number [ 209.748120] BTRFS error (device loop4): open_ctree failed [ 209.858258] XFS (loop7): Invalid superblock magic number 2018/04/05 22:48:18 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xffffffffffffffeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c39fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 22:48:18 executing program 0: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:18 executing program 3: r0 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0xc) 2018/04/05 22:48:18 executing program 1: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6}}, 0xe8) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 2018/04/05 22:48:18 executing program 2: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:18 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="cc1373fc000000000000000000000000000000000000000000000000000000003030b86e0d5f4090902c6457136cf04d000001000000000001000000000000005f42485266535f4d070000000000000000204000000000000000020000000000000000000000000000000000000000000000c0010000000000700000000000000600000000000000010000000000000000100000001000000010000000100000610000000500000000000000000000000000000000000000000000004503000000000000000000000001000000000000000000c001000000000000180100000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000e07956565b5f45a6bad668ef5e4a3a4f3030b86e0d5f4090902c", 0x125, 0x10000}], 0x0, &(0x7f0000016000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000012c0)={0x3, 0x337e, 0x0, 0x9, 0x3, 0x2, 0x4, 0x7fff, r5}, &(0x7f0000001300)=0x20) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r2, 0x20}, {r0, 0x1}, {r0, 0x8002}], 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/04/05 22:48:18 executing program 7: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{&(0x7f0000000240)="0ece8cf725415d7bd94e90647dec69a33f7a58a060bbccf20918de6661614db1a1ef52910ec7b2f899da1e2ad97b92af29ece8b4230f4caa23af482259af32741718ecb994693afc08217417811a4c5ee136bba270439824a638890d819e38764a3d5826682d5aae2d8fd12d2bdcbb0b3ea684190f5181c469cde726e6b343ef512bcdbc85769e3482126ecd1a51939c63a7325c196e91888b3761ed60624ab6babce599165a967a633c", 0xaa, 0x9}, {&(0x7f0000001300)="20aadb40ccdab17a9e6a5d6271bde618094f02f6cb2c035fac09e6688509857f90aef38c2ff50d54a3371cfe8fee8d9cf87af2a2a08924ba31ccb097471e1bc69ac22436445aa977cabd1d46b578d18b2b545c847175dc594a14ec0294773bb20bc728b62ab613a8f3b021", 0x6b, 0x11}], 0x804404, &(0x7f0000001400)={'nouuid,', {[{@ikeep='ikeep', 0x2c}, {@uqnoenforce='uqnoenforce', 0x2c}, {@attr2='attr2', 0x2c}, {@pqnoenforce='pqnoenforce', 0x2c}, {@allocsize={'allocsize', 0x3d, [0x33, 0x67]}, 0x2c}, {@prjquota='prjquota', 0x2c}, {@ikeep='ikeep', 0x2c}, {@swalloc='swalloc', 0x2c}, {@nogrpid='nogrpid', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}}) [ 210.550364] bridge0: port 1(erspan0) entered blocking state [ 210.556193] bridge0: port 1(erspan0) entered disabled state [ 210.576289] BTRFS error (device loop4): superblock checksum mismatch 2018/04/05 22:48:18 executing program 3: r0 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0xc) 2018/04/05 22:48:18 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xffffffffffffffeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c39fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 22:48:18 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x7}) dup3(r1, r0, 0x0) [ 210.610215] device erspan0 entered promiscuous mode [ 210.625995] BTRFS error (device loop4): open_ctree failed [ 210.628292] bridge0: port 1(erspan0) entered blocking state [ 210.635893] XFS (loop7): Invalid superblock magic number [ 210.637464] bridge0: port 1(erspan0) entered disabled state [ 210.690622] device erspan0 entered promiscuous mode 2018/04/05 22:48:18 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x125, 0x10000}], 0x0, &(0x7f0000016000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000012c0)={0x3, 0x337e, 0x0, 0x9, 0x3, 0x2, 0x4, 0x7fff, r5}, &(0x7f0000001300)=0x20) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r2, 0x20}, {r0, 0x1}, {r0, 0x8002}], 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/04/05 22:48:18 executing program 7: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{&(0x7f0000000240)="0ece8cf725415d7bd94e90647dec69a33f7a58a060bbccf20918de6661614db1a1ef52910ec7b2f899da1e2ad97b92af29ece8b4230f4caa23af482259af32741718ecb994693afc08217417811a4c5ee136bba270439824a638890d819e38764a3d5826682d5aae2d8fd12d2bdcbb0b3ea684190f5181c469cde726e6b343ef512bcdbc85769e3482126ecd1a51939c63a7325c196e91888b3761ed60624ab6babce599165a967a633c", 0xaa, 0x9}, {&(0x7f0000001300)="20aadb40ccdab17a9e6a5d6271bde618094f02f6cb2c035fac09e6688509857f90aef38c2ff50d54a3371cfe8fee8d9cf87af2a2a08924ba31ccb097471e1bc69ac22436445aa977cabd1d46b578d18b2b545c847175dc594a14ec0294773bb20bc728b62ab613a8f3b021", 0x6b, 0x11}], 0x804404, &(0x7f0000001400)={'nouuid,', {[{@ikeep='ikeep', 0x2c}, {@uqnoenforce='uqnoenforce', 0x2c}, {@attr2='attr2', 0x2c}, {@pqnoenforce='pqnoenforce', 0x2c}, {@allocsize={'allocsize', 0x3d, [0x33, 0x67]}, 0x2c}, {@prjquota='prjquota', 0x2c}, {@ikeep='ikeep', 0x2c}, {@swalloc='swalloc', 0x2c}, {@nogrpid='nogrpid', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}}) [ 210.722532] bridge0: port 1(erspan0) entered blocking state [ 210.728381] bridge0: port 1(erspan0) entered forwarding state 2018/04/05 22:48:18 executing program 3: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) write(r1, &(0x7f0000000200), 0x0) 2018/04/05 22:48:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000164ff0)={0x2, &(0x7f0000000000)=[{0x8000000000b1, 0x0, 0x0, 0xff7ffffff7fffffe}, {0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) [ 210.780541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.886413] BTRFS error (device loop4): superblock checksum mismatch [ 210.915916] XFS (loop7): Invalid superblock magic number [ 210.941502] BTRFS error (device loop4): open_ctree failed [ 211.390933] bridge0: port 1(erspan0) entered blocking state [ 211.396753] bridge0: port 1(erspan0) entered forwarding state [ 211.404439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 211.783123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 2018/04/05 22:48:19 executing program 6: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0xfffffffffffff4d0}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) 2018/04/05 22:48:19 executing program 5: syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)={[{@acl='acl', 0x2c}]}) 2018/04/05 22:48:19 executing program 7: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{&(0x7f0000000240)="0ece8cf725415d7bd94e90647dec69a33f7a58a060bbccf20918de6661614db1a1ef52910ec7b2f899da1e2ad97b92af29ece8b4230f4caa23af482259af32741718ecb994693afc08217417811a4c5ee136bba270439824a638890d819e38764a3d5826682d5aae2d8fd12d2bdcbb0b3ea684190f5181c469cde726e6b343ef512bcdbc85769e3482126ecd1a51939c63a7325c196e91888b3761ed60624ab6babce599165a967a633c", 0xaa, 0x9}, {&(0x7f0000001300)="20aadb40ccdab17a9e6a5d6271bde618094f02f6cb2c035fac09e6688509857f90aef38c2ff50d54a3371cfe8fee8d9cf87af2a2a08924ba31ccb097471e1bc69ac22436445aa977cabd1d46b578d18b2b545c847175dc594a14ec0294773bb20bc728b62ab613a8f3b021", 0x6b, 0x11}], 0x804404, &(0x7f0000001400)={'nouuid,', {[{@ikeep='ikeep', 0x2c}, {@uqnoenforce='uqnoenforce', 0x2c}, {@attr2='attr2', 0x2c}, {@pqnoenforce='pqnoenforce', 0x2c}, {@allocsize={'allocsize', 0x3d, [0x33, 0x67]}, 0x2c}, {@prjquota='prjquota', 0x2c}, {@ikeep='ikeep', 0x2c}, {@swalloc='swalloc', 0x2c}, {@nogrpid='nogrpid', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}}) 2018/04/05 22:48:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/05 22:48:19 executing program 3: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) write(r1, &(0x7f0000000200), 0x0) 2018/04/05 22:48:19 executing program 2: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:19 executing program 0: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:19 executing program 1: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) [ 211.897583] gfs2: not a GFS2 filesystem 2018/04/05 22:48:19 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000ff0000000002800000850000002700000005000000000000009500000000000000"], &(0x7f00000000c0)="00007bf056c718041899f95b1a", 0x1, 0xce, &(0x7f0000000100)=""/206}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0xd5, &(0x7f0000000200)="8c6bf851eece9bc137121ebd951d", &(0x7f0000000380)=""/213}, 0x28) 2018/04/05 22:48:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) [ 211.947282] XFS (loop7): Invalid superblock magic number [ 211.956698] gfs2: not a GFS2 filesystem 2018/04/05 22:48:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 22:48:19 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/05 22:48:19 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f00008bb000)='6', 0x1, 0x0, &(0x7f00004f4fe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000e3cf9c)="1d", 0x1, 0x0, &(0x7f0000242fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000e64ffc), &(0x7f0000ce6ffc)=0x4) 2018/04/05 22:48:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/05 22:48:19 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/05 22:48:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x0, 0x3}, @acquire={0x40046305}, @enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000000140)="85d782bbc7372fa52f3bd37ae65412e95f3f6a965b71ef073a7b575f1c0a1268a769b31e0bc7a87a623639269732ad761c5317ed02cd44b65ec94b03cc9bfc1b02a7c82ba098903e"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) [ 212.367103] binder: 15593:15594 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 212.385613] binder: 15593:15594 Acquire 1 refcount change on invalid ref 0 ret -22 [ 213.175837] binder: 15593:15594 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 213.182923] binder: BINDER_SET_CONTEXT_MGR already set [ 213.188259] binder: 15593:15619 ioctl 40046207 0 returned -16 [ 213.205708] binder: release 15593:15619 transaction 45 out, still active [ 213.212632] binder: undelivered TRANSACTION_COMPLETE [ 213.217834] binder: release 15593:15594 transaction 43 out, still active 2018/04/05 22:48:20 executing program 7: syz_emit_ethernet(0x162, &(0x7f0000005faa)={@random="ff3997ffcd00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x2, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0xd, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/04/05 22:48:20 executing program 0: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:20 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/05 22:48:20 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:20 executing program 1: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a2, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x5, 0x0, @fr_pvc=&(0x7f0000000040)}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x4, &(0x7f00000004c0)=[{0x8, 0x4, 0x1, 0x8000}, {0xffffffff8b7732e9, 0x3000000, 0x1, 0x200}, {0x5, 0x4, 0x5, 0xf8d5}, {0x8, 0x2706, 0x7, 0x800}]}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', 0x0, 0x14}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000980)=0x1, 0x3c2) getuid() setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000005c0)="4e671f25d4ca7047abd579773bfa40b08908bc1bd806666103a8fbcc38795e984426a60f31ee14633191f0aaffcb60bc6877d3f2c7d05879aabc3f35ed061058f4df45dd8d1b58eaa2cec7503af61d5723e29446a9aef4d12aad957c260f7bd312709f619923c5dda24ca9dd8255bf5ce5bd03bb75fdcb7052c8d918a9f61ae9682feda075a717691ccd07f4b6e3bada890ac2db445c2a021784ecedb85758fe0ba8f47ee849d7b808beaa8c3605f00e5e7b39fecf6376a0aada9ed801aac043d70c576c579e36ec300e65a991", 0xcd) gettid() setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000480)=0x8, 0x4) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c1129c0a9675a35183c16f014000022973d082cffffffff000000005bf20000000000000000067ed9dc6b31221426571e6731fb814d598088254d42a0fa381231ff7c15610b6fffb46576fbb5beac997b31a4013960cf1169ee5c11ed5e32ed442c506cf44e88b92876a783cea87d9055164855c8ba2561078d4b2f77f37707950cc0cd260bb83a75c533fd2d9a01328620eb1e0c4276f907aa21e5f3c66103838b813516e870a07e4a9d623d7eabf8cbf9b349bd30b2710b6c735f1915e0b99cf50f7bb5440000000000000000000000"], 0xd1}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440002) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=r0]], 0x1}, 0x1, 0x0, 0x0, 0x10000041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008041}, 0x44840) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xd601}) accept$netrom(0xffffffffffffffff, &(0x7f0000000780)=@full, &(0x7f0000000800)=0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 22:48:20 executing program 3: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) write(r1, &(0x7f0000000200), 0x0) 2018/04/05 22:48:20 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:20 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x0, 0x3}) [ 213.224716] binder: release 15593:15594 transaction 42 in, still active [ 213.231538] binder: undelivered TRANSACTION_COMPLETE [ 213.236716] binder: release 15593:15619 transaction 42 out, still active [ 213.243587] binder: undelivered TRANSACTION_COMPLETE [ 213.248751] binder: send failed reply for transaction 43, target dead [ 213.255375] binder: send failed reply for transaction 42, target dead [ 213.262039] binder: send failed reply for transaction 45, target dead 2018/04/05 22:48:20 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) close(r1) open(&(0x7f0000b3b000)='./bus\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/05 22:48:20 executing program 4: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/05 22:48:20 executing program 4: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/05 22:48:21 executing program 4: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/05 22:48:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000233fe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x800000000002}, 0x1c) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000140), &(0x7f0000000100)=0xfed6) 2018/04/05 22:48:21 executing program 0: r0 = memfd_create(&(0x7f0000000040)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460007000004000000000000000300001a"], 0x14) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/05 22:48:21 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:21 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="8f0008180000000000100208000000"]) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x7f) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003200)=[{&(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000000c80), 0x0, &(0x7f0000000f00)=[@init={0x18, 0x84}, @sndinfo={0x20, 0x84, 0x2}, @init={0x18, 0x84}, @init={0x18, 0x84}, @init={0x18, 0x84}, @sndinfo={0x20, 0x84, 0x2, {0x1}}], 0x120}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x35e}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:48:21 executing program 3: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r0, 0x8001) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) read(r1, &(0x7f0000003600)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) ftruncate(r0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) write(r1, &(0x7f0000000200), 0x0) 2018/04/05 22:48:21 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/05 22:48:22 executing program 4: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/05 22:48:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) close(r0) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='q', 0x1}], 0x1}, 0x0) 2018/04/05 22:48:22 executing program 4: shmctl$IPC_RMID(0x0, 0xffffffffffffffff) 2018/04/05 22:48:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) socketpair$inet6(0xa, 0x200007fffd, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r2, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x1, 0x4}}, 0x80) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) r4 = socket(0x400020000000010, 0x3, 0x0) read(r4, &(0x7f0000000180)=""/190, 0x69) write(r4, &(0x7f00000000c0)="1f00000056000d6dfcffff00bc0203030700ef2104173f81000000020000", 0x1e) write(r0, &(0x7f0000c9afe1)="1f0000001500ff03f92f01051c180fff0100000a08000200000e00a0", 0x1c) r5 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000600)={'syzkaller1\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x1}, &(0x7f0000000680)=0x8) socketpair(0x0, 0x2, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x16}}}, 0xce, 0x9}, &(0x7f00000005c0)=0x90) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000080)={0x9, 0x1, 0x0, 0x4}, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'syzkaller1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="310000001f000000000000000000000006000000ac1414bbe000000200000007070100000000000000000000000000000000070000000000000000000000000000000000000000006ef1f38b514bdb2d01010006000000090000000100000000000000000000ffffffffffff00000000000000000000ffffe00000024e2300061f00000000000000000000000000000000153242cdfe3337fc0100020000000000000009000000000700000000000000ff0700000000000003000000800000000800000004000000"]}) 2018/04/05 22:48:22 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00006fcff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f0000779000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000b0ef98)={0x0, 0x9, 0x4}) 2018/04/05 22:48:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000270027000f8", 0x16}], 0x0, &(0x7f00000016c0)={[{@nocase='nocase', 0x2c}]}) 2018/04/05 22:48:22 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000001540)) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) [ 214.706149] FAT-fs (loop0): Directory bread(block 5) failed [ 214.716153] FAT-fs (loop0): Directory bread(block 6) failed [ 214.728187] FAT-fs (loop0): Directory bread(block 7) failed [ 214.741095] FAT-fs (loop0): Directory bread(block 8) failed [ 214.753788] FAT-fs (loop0): Directory bread(block 9) failed [ 214.765861] FAT-fs (loop0): Directory bread(block 10) failed [ 214.774998] FAT-fs (loop0): Directory bread(block 11) failed [ 214.781628] FAT-fs (loop0): Directory bread(block 12) failed [ 214.787789] FAT-fs (loop0): Directory bread(block 13) failed 2018/04/05 22:48:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000340)="791f7dfde0815c48c13197fc2e324dea", 0x10) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) [ 214.803359] FAT-fs (loop0): Directory bread(block 14) failed 2018/04/05 22:48:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00007f9000)=[{{&(0x7f000051e000)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0xb, &(0x7f0000df9000)=[{&(0x7f0000d3d000)=""/4096, 0x1000}, {&(0x7f00000ec000)=""/217, 0xd9}, {&(0x7f0000da2f57)=""/169, 0xa9}, {&(0x7f00004bbf68)=""/152, 0x98}, {&(0x7f0000d33f22)=""/222, 0x150}], 0x5}}, {{&(0x7f0000a18ffa)=@hci, 0x6, &(0x7f00001cdff9), 0x0, &(0x7f0000259f14)=""/236, 0xec}}], 0x2, 0x0, &(0x7f0000fd0000)={0x77359400}) 2018/04/05 22:48:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xd, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) 2018/04/05 22:48:23 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/05 22:48:23 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:23 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x686471bc92c366fc) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/41, 0x29}, {&(0x7f00000026c0)=""/123, 0x7b}], 0x9, &(0x7f0000002800)=""/92, 0x5c, 0x9}, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000028c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000002900)=r4) shutdown(r3, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="f91d259c6621606a88cc0e", 0xb}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/05 22:48:23 executing program 1: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0xfefffffffffffffb, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) fstat(r1, &(0x7f0000000000)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x8084, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000340)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000001c0)=0x6) ustat(0x6, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [], 0x1}, 0x7, 0x0, 0x4002, 0x4, 0x5, 0x7, 0x7}, 0x20) ioctl$int_in(r4, 0x800000c0045002, &(0x7f0000000200)) ppoll(&(0x7f0000000000)=[{r4}], 0x152, &(0x7f00000000c0), &(0x7f0000000100), 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180), 0x4) read(r4, &(0x7f0000000500)=""/143, 0xfffffffffffffe42) ioctl$sock_inet_SIOCSARP(r3, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0xfe]}, {}, 0x0, {0x2, 0x0, @loopback=0x7f000001}}) bind$llc(r3, &(0x7f0000000080)={0x1a, 0x20, 0x100000001, 0x4, 0x6, 0x401, @random="d9f08308fda5"}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40800001}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}]}, 0x28}, 0x1}, 0x4000) userfaultfd(0x80800) fchmod(r4, 0x80) dup2(r2, r1) socketpair(0x0, 0x0, 0x1, &(0x7f0000000600)) 2018/04/05 22:48:23 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/05 22:48:23 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000ff7000)="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", 0x76d, 0x0, &(0x7f0000ff7fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x40000000000007, &(0x7f0000fecffc), 0x4) sendto$inet6(r0, &(0x7f0000bf8f8f)="b5", 0x1, 0x0, &(0x7f0000f87000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() getrlimit(0xb, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xc10b, 0x9, [0x1, 0x7, 0x0, 0x1, 0x8, 0x5, 0x8, 0xfff, 0x8]}, &(0x7f0000000100)=0x1a) 2018/04/05 22:48:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x208}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002ac0)) [ 215.631000] QAT: Invalid ioctl 2018/04/05 22:48:23 executing program 4: bpf$BPF_PROG_QUERY(0xc, &(0x7f0000001000), 0x20) 2018/04/05 22:48:23 executing program 3: clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a2effc), &(0x7f00007c4000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) wait4(r2, 0x0, 0x80000000, &(0x7f0000000080)) 2018/04/05 22:48:23 executing program 0: r0 = memfd_create(&(0x7f0000403000)='\x00', 0x80000000000006) fcntl$addseals(r0, 0x409, 0x4) ftruncate(r0, 0x800000) [ 215.667628] QAT: Stopping all acceleration devices. 2018/04/05 22:48:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f000066b000)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/05 22:48:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002f8fc8)={0x0, 0x0, &(0x7f0000002000)}, 0x8001) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f00002a1000)=[{&(0x7f0000427000)=""/1, 0x1}], 0x1, &(0x7f0000154f5e)}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) read(r4, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r2, 0x14) sendmsg$alg(r1, &(0x7f00002f8000)={0x0, 0x0, &(0x7f00000fdfc0)=[{&(0x7f00001ea000)='`', 0x1}], 0x1, &(0x7f00002f8fe8)}, 0x0) [ 215.722809] QAT: Invalid ioctl [ 215.737171] QAT: Stopping all acceleration devices. 2018/04/05 22:48:23 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 2018/04/05 22:48:23 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"69666230000000000000f500", 0x6012}) close(r0) 2018/04/05 22:48:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000540)}) 2018/04/05 22:48:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000540)}) 2018/04/05 22:48:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x21, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) 2018/04/05 22:48:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000040)) 2018/04/05 22:48:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3a, &(0x7f000097c000), 0x0) 2018/04/05 22:48:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000540)}) 2018/04/05 22:48:24 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/05 22:48:24 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/05 22:48:24 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x8001}, {}, @raw8={"b904b685df34a4a17c392d8b"}}], 0x30) 2018/04/05 22:48:24 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000ff7000)="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", 0x76d, 0x0, &(0x7f0000ff7fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x40000000000007, &(0x7f0000fecffc), 0x4) sendto$inet6(r0, &(0x7f0000bf8f8f)="b5", 0x1, 0x0, &(0x7f0000f87000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() getrlimit(0xb, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xc10b, 0x9, [0x1, 0x7, 0x0, 0x1, 0x8, 0x5, 0x8, 0xfff, 0x8]}, &(0x7f0000000100)=0x1a) 2018/04/05 22:48:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="24000000200025eff26b000420edfc00020b00080110b500001051ea08000100000000b7", 0x24) 2018/04/05 22:48:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000040)) 2018/04/05 22:48:24 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x400000002}, 0x1c) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000003740)}}], 0x2, 0x0) 2018/04/05 22:48:24 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x202, 0x0) r1 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) 2018/04/05 22:48:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000540)}) 2018/04/05 22:48:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x21, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) 2018/04/05 22:48:24 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/05 22:48:24 executing program 4: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x100000004, &(0x7f0000000140)={0x0}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x58, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff, 0x0, 0x0, @time={r3}, {}, {}, @connect}], 0x1c) 2018/04/05 22:48:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000040)) 2018/04/05 22:48:24 executing program 6: unshare(0x8000400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_getsetattr(r0, &(0x7f0000738fc0), &(0x7f0000356000)) 2018/04/05 22:48:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x28, 0x80000000000027, 0x1ff307543bf68163, 0x0, 0x0, {0xa}, [@typed={0x14, 0x4, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, 0x28}, 0x1}, 0x0) 2018/04/05 22:48:24 executing program 4: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x100000004, &(0x7f0000000140)={0x0}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x58, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff, 0x0, 0x0, @time={r3}, {}, {}, @connect}], 0x1c) [ 217.255837] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/05 22:48:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x21, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) 2018/04/05 22:48:25 executing program 6: unshare(0x8000400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_getsetattr(r0, &(0x7f0000738fc0), &(0x7f0000356000)) 2018/04/05 22:48:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f00000017c0)={&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000780)="da", 0x1}], 0x1, &(0x7f0000000180)}, 0x0) 2018/04/05 22:48:25 executing program 3: r0 = socket(0x10, 0x83000000003, 0x0) write(r0, &(0x7f0000000080)="220000001e0023fffc01000f09000700002800ebfeffa7ff1a00ffff05000980be45", 0x22) 2018/04/05 22:48:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000040)) 2018/04/05 22:48:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) 2018/04/05 22:48:25 executing program 4: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x100000004, &(0x7f0000000140)={0x0}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x58, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff, 0x0, 0x0, @time={r3}, {}, {}, @connect}], 0x1c) 2018/04/05 22:48:25 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000ff7000)="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", 0x76d, 0x0, &(0x7f0000ff7fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x40000000000007, &(0x7f0000fecffc), 0x4) sendto$inet6(r0, &(0x7f0000bf8f8f)="b5", 0x1, 0x0, &(0x7f0000f87000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() getrlimit(0xb, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xc10b, 0x9, [0x1, 0x7, 0x0, 0x1, 0x8, 0x5, 0x8, 0xfff, 0x8]}, &(0x7f0000000100)=0x1a) 2018/04/05 22:48:25 executing program 4: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x100000004, &(0x7f0000000140)={0x0}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x58, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff, 0x0, 0x0, @time={r3}, {}, {}, @connect}], 0x1c) 2018/04/05 22:48:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x21, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) 2018/04/05 22:48:25 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/04/05 22:48:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) sendmmsg(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)=@can={0x1d}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)='[', 0x1}], 0x1, &(0x7f00000003c0)}}], 0x1, 0x0) 2018/04/05 22:48:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8001020}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfb, &(0x7f0000000040)=""/251}, 0x48) 2018/04/05 22:48:25 executing program 6: unshare(0x8000400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_getsetattr(r0, &(0x7f0000738fc0), &(0x7f0000356000)) 2018/04/05 22:48:25 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/04/05 22:48:26 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000ff7000)="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", 0x76d, 0x0, &(0x7f0000ff7fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x40000000000007, &(0x7f0000fecffc), 0x4) sendto$inet6(r0, &(0x7f0000bf8f8f)="b5", 0x1, 0x0, &(0x7f0000f87000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() getrlimit(0xb, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xc10b, 0x9, [0x1, 0x7, 0x0, 0x1, 0x8, 0x5, 0x8, 0xfff, 0x8]}, &(0x7f0000000100)=0x1a) 2018/04/05 22:48:26 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x0, 0x0, 0xffff) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) 2018/04/05 22:48:26 executing program 2: ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000080)=""/222) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x1d}, 0x10) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x10000003, 0x100000000030, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x1) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x4000}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000d9ff8)=0x80000001, 0x400) ioctl(r4, 0xc0184900, &(0x7f0000d68f5d)="60bc836ead2c9193cf") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) rmdir(&(0x7f0000001500)='./file0\x00') write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0185879, &(0x7f0000000080)={0x2a0, &(0x7f0000001540)}) sendmsg$inet_sctp(r5, &(0x7f00000014c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000001c0)="1605dd", 0x3}], 0x1, &(0x7f0000001480), 0x0, 0x20000800}, 0x40000) semget$private(0x0, 0xfffffffffffffffc, 0x3d) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) futex(&(0x7f00000001c0)=0x10000004, 0x80000000000b, 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) rt_sigprocmask(0x2, &(0x7f00000002c0)={0x800}, 0x0, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300)=""/2, &(0x7f0000000340)=0x2) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2=0xe0000002}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}, 0x18, {0x2, 0x4e22, @multicast1=0xe0000001}, 'syz_tun\x00'}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 2018/04/05 22:48:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x400000000001c}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x7ffffffff000, 0x2, 0x0, &(0x7f0000000380)) 2018/04/05 22:48:26 executing program 0: socket(0x40000000015, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000e91000)={0x0, 0x0, &(0x7f00001cd000), 0x0, &(0x7f0000298000)=[{0x18, 0x1, 0x1, "13"}], 0x18}, 0x0) 2018/04/05 22:48:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000881ffc)=0xdf29, 0x4) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/05 22:48:26 executing program 6: unshare(0x8000400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_getsetattr(r0, &(0x7f0000738fc0), &(0x7f0000356000)) 2018/04/05 22:48:26 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000867000)=@fragment, 0x8) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x4040045, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) 2018/04/05 22:48:26 executing program 4: semget$private(0x0, 0x1, 0x14) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x9d9, 0x1, &(0x7f0000000100)="dee819a5f8f0f59b0a", 0x10000, 0x9, 0x1, 0x8, 0x5, 0x1f, 0x100000000, "4b71fc0476870ada4c6b4a826614504fbe4cb7916f46edfecdec9c72ccc47eb8e95c5e3800970339eda1a80aa685b547af5fc4feeff3366541535cfb306912bf0761"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x88002, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f00000004c0)={r7, 0x3}) preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000440)=""/4, 0x4}], 0x6, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={r6}) setfsuid(r9) r10 = dup(r4) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000200)=""/5}, {&(0x7f0000000240)=""/188, 0x6}], 0x3b0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001740)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001800)=ANY=[@ANYRES32=r11, @ANYBLOB="51000000e0481fd035ddb6bf5b3fc3729974cae4fb47e81eb97956c8571fb94e8013aabed15ad7e6ff9015771281ffab651fa8af1ddb0d510b3c82b35a9c30f19d16c4d5625c28be43358a1c7c3edb5f2a67973db39a26dd16a555259b0523421886df651a12170296245a96541e834f6b982a52eb31595fb518db6cad1fb07d7a0061f0bb14dffdc74cc29de7b5394ca2c0f1f8d19c52c7c16a197d495ba8bb4c00e67c235fcc5e5afda3021622231953e79fe5bc4ec79bf27cf396189d4df1f1b42c10d35e2a5f9285c5432e0ec67d1564912cbedd9bf0c4596ed4d307e8db17637c733648ad9f55d407011a1a9ef4681de3ce"], &(0x7f0000000140)=0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f000076f000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r12, 0x80247009, 0x8) 2018/04/05 22:48:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0xe6, 0x8, [0x0, 0x0]}) 2018/04/05 22:48:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="2400000058001f00ff03f4f9002304000a04f51108000100020100000800178001000000", 0x24) 2018/04/05 22:48:26 executing program 6: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x2000000000010d, 0x1000000c0, &(0x7f00007e0000)=""/4, &(0x7f0000000000)=0x4) 2018/04/05 22:48:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="b9ad0200000f32b8fa7f00000f23c80f21f8350400d0000f23f866b80f000f00d066b8ce000f00d02e360fc76d6e66b836008ed00f01980300000002b8fa6000000f07b99c0b00000f32", 0x4a}], 0x1, 0x0, &(0x7f0000000200), 0x0) 2018/04/05 22:48:26 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x0, 0x0, 0xffff) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) 2018/04/05 22:48:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) shutdown(r0, 0x1) 2018/04/05 22:48:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00006bb000)="4800000014001900ce0000000000000002113b850e1de0974881000000fe09a2bc4a58049164643e89000000de213ee20700000000000000005bff2b000000000000070000000000", 0x48}], 0x1) 2018/04/05 22:48:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) 2018/04/05 22:48:27 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x0, 0x0, 0xffff) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) 2018/04/05 22:48:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) shutdown(r0, 0x1) 2018/04/05 22:48:27 executing program 4: semget$private(0x0, 0x1, 0x14) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x9d9, 0x1, &(0x7f0000000100)="dee819a5f8f0f59b0a", 0x10000, 0x9, 0x1, 0x8, 0x5, 0x1f, 0x100000000, "4b71fc0476870ada4c6b4a826614504fbe4cb7916f46edfecdec9c72ccc47eb8e95c5e3800970339eda1a80aa685b547af5fc4feeff3366541535cfb306912bf0761"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x88002, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f00000004c0)={r7, 0x3}) preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000440)=""/4, 0x4}], 0x6, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={r6}) setfsuid(r9) r10 = dup(r4) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000200)=""/5}, {&(0x7f0000000240)=""/188, 0x6}], 0x3b0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001740)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001800)=ANY=[@ANYRES32=r11, @ANYBLOB="51000000e0481fd035ddb6bf5b3fc3729974cae4fb47e81eb97956c8571fb94e8013aabed15ad7e6ff9015771281ffab651fa8af1ddb0d510b3c82b35a9c30f19d16c4d5625c28be43358a1c7c3edb5f2a67973db39a26dd16a555259b0523421886df651a12170296245a96541e834f6b982a52eb31595fb518db6cad1fb07d7a0061f0bb14dffdc74cc29de7b5394ca2c0f1f8d19c52c7c16a197d495ba8bb4c00e67c235fcc5e5afda3021622231953e79fe5bc4ec79bf27cf396189d4df1f1b42c10d35e2a5f9285c5432e0ec67d1564912cbedd9bf0c4596ed4d307e8db17637c733648ad9f55d407011a1a9ef4681de3ce"], &(0x7f0000000140)=0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f000076f000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r12, 0x80247009, 0x8) 2018/04/05 22:48:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x400080000028, 0x100b, 0x0, 0x0, {0x1}, [@typed={0x8, 0x0, @u32=0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 22:48:27 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000011300)={&(0x7f0000010f00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000111c0)=[{&(0x7f0000010f80)=""/74, 0x4a}, {&(0x7f0000011000)=""/53, 0x35}, {&(0x7f0000011040)=""/211, 0xd3}, {&(0x7f0000011140)=""/81, 0x51}], 0x4, &(0x7f0000011200)=""/213, 0xd5}, 0x10003) sendmsg(r1, &(0x7f0000012700)={&(0x7f0000011340)=@ll={0x11, 0x15, r3, 0x1, 0xc59, 0x6, @random="035fd7e44ad4"}, 0x80, &(0x7f00000115c0), 0x0, &(0x7f0000011600)=ANY=[], 0x0, 0x8000}, 0x4000010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r5 = gettid() socketpair$inet(0x2, 0x4, 0xffb, &(0x7f0000002dc0)) recvmsg(r2, &(0x7f0000001c80)={&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/254, 0xfe}, {&(0x7f00000017c0)=""/235, 0xeb}, {&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/32, 0x20}, {&(0x7f0000001a00)=""/169, 0xa9}], 0x8, &(0x7f0000001b80)=""/227, 0xe3, 0x6}, 0x10000) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x8, 0x6, 0x8, 0x4, 0x0, 0x8, 0x30000, 0x9, 0x3f, 0x1, 0x7, 0x4, 0xd7db, 0x8, 0xa3, 0x6, 0x0, 0x7ff, 0x3fd, 0x0, 0x7ff, 0x5, 0x80, 0x7, 0x3, 0x7f, 0x5, 0x3ff, 0x400, 0x0, 0x9, 0x0, 0x6, 0x7, 0x8, 0xfb, 0x0, 0x2, 0x0, @perf_config_ext={0x40}, 0x4, 0xfff, 0x5b61, 0x3, 0x81, 0x4, 0xffffffffffffffff}, r5, 0x6, r0, 0x2) recvmsg(0xffffffffffffffff, &(0x7f000000f540)={&(0x7f000000ee40)=@ll={0x0, 0x0, 0x0}, 0x80, &(0x7f000000f480)=[{&(0x7f000000eec0)=""/233, 0xe9}, {&(0x7f000000efc0)}, {&(0x7f000000f0c0)=""/130, 0x82}, {&(0x7f000000f180)=""/210, 0xd2}, {&(0x7f000000f280)=""/25, 0x19}, {&(0x7f000000f2c0)=""/220, 0xdc}, {&(0x7f000000f3c0)=""/132, 0x84}], 0x7, &(0x7f000000f500)=""/12, 0xc, 0x61c9}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f000000f580)={0xb, 0x2, &(0x7f0000000280)=@raw=[@alu={0x4, 0x9, 0x5, 0x8, 0xb, 0xfffffff0, 0x11}], &(0x7f00000002c0)='syzkaller\x00', 0x80000001, 0xf5, &(0x7f0000000300)=""/245, 0x41100, 0x1, [], r6}, 0x48) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000002d40)) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x5, 0xf, 0x5, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001d00)={r7}) gettid() ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) socket$kcm(0x29, 0x5, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000480)) close(r0) 2018/04/05 22:48:27 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000000003, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d72411e5409452d170eb06c1ef4f9d0841cdb13e5578134e2d2d25ff6b1b6f4e62049d62985b8d668fbf2ef62686ef752fe2ebfaa4056983e7aa45826839b"}, 0x60) 2018/04/05 22:48:27 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r1, 0x0) setregid(0x0, 0x0) 2018/04/05 22:48:27 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x0, 0x0, 0xffff) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) 2018/04/05 22:48:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f0000000540)=0x84) 2018/04/05 22:48:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) shutdown(r0, 0x1) 2018/04/05 22:48:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}]}, 0x60}, 0x1}, 0x0) 2018/04/05 22:48:27 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 2018/04/05 22:48:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x16}}) 2018/04/05 22:48:27 executing program 4: semget$private(0x0, 0x1, 0x14) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x9d9, 0x1, &(0x7f0000000100)="dee819a5f8f0f59b0a", 0x10000, 0x9, 0x1, 0x8, 0x5, 0x1f, 0x100000000, "4b71fc0476870ada4c6b4a826614504fbe4cb7916f46edfecdec9c72ccc47eb8e95c5e3800970339eda1a80aa685b547af5fc4feeff3366541535cfb306912bf0761"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x88002, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f00000004c0)={r7, 0x3}) preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000440)=""/4, 0x4}], 0x6, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={r6}) setfsuid(r9) r10 = dup(r4) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000200)=""/5}, {&(0x7f0000000240)=""/188, 0x6}], 0x3b0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001740)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001800)=ANY=[@ANYRES32=r11, @ANYBLOB="51000000e0481fd035ddb6bf5b3fc3729974cae4fb47e81eb97956c8571fb94e8013aabed15ad7e6ff9015771281ffab651fa8af1ddb0d510b3c82b35a9c30f19d16c4d5625c28be43358a1c7c3edb5f2a67973db39a26dd16a555259b0523421886df651a12170296245a96541e834f6b982a52eb31595fb518db6cad1fb07d7a0061f0bb14dffdc74cc29de7b5394ca2c0f1f8d19c52c7c16a197d495ba8bb4c00e67c235fcc5e5afda3021622231953e79fe5bc4ec79bf27cf396189d4df1f1b42c10d35e2a5f9285c5432e0ec67d1564912cbedd9bf0c4596ed4d307e8db17637c733648ad9f55d407011a1a9ef4681de3ce"], &(0x7f0000000140)=0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f000076f000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r12, 0x80247009, 0x8) 2018/04/05 22:48:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r0, &(0x7f0000096000)=[{&(0x7f00000002c0)="580000001400192340a14b80fd0d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e9900050028635a3c0410f5100002000000000000001c04ed5dfffff500002f000d00010004040c0000cd22dd33a52aa2", 0x58}], 0x1) 2018/04/05 22:48:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) shutdown(r0, 0x1) 2018/04/05 22:48:28 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 2018/04/05 22:48:28 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x14025) unlink(&(0x7f00000002c0)='./control/file0\x00') 2018/04/05 22:48:28 executing program 4: semget$private(0x0, 0x1, 0x14) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x9d9, 0x1, &(0x7f0000000100)="dee819a5f8f0f59b0a", 0x10000, 0x9, 0x1, 0x8, 0x5, 0x1f, 0x100000000, "4b71fc0476870ada4c6b4a826614504fbe4cb7916f46edfecdec9c72ccc47eb8e95c5e3800970339eda1a80aa685b547af5fc4feeff3366541535cfb306912bf0761"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x88002, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f00000004c0)={r7, 0x3}) preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000440)=""/4, 0x4}], 0x6, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={r6}) setfsuid(r9) r10 = dup(r4) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000200)=""/5}, {&(0x7f0000000240)=""/188, 0x6}], 0x3b0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001740)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001800)=ANY=[@ANYRES32=r11, @ANYBLOB="51000000e0481fd035ddb6bf5b3fc3729974cae4fb47e81eb97956c8571fb94e8013aabed15ad7e6ff9015771281ffab651fa8af1ddb0d510b3c82b35a9c30f19d16c4d5625c28be43358a1c7c3edb5f2a67973db39a26dd16a555259b0523421886df651a12170296245a96541e834f6b982a52eb31595fb518db6cad1fb07d7a0061f0bb14dffdc74cc29de7b5394ca2c0f1f8d19c52c7c16a197d495ba8bb4c00e67c235fcc5e5afda3021622231953e79fe5bc4ec79bf27cf396189d4df1f1b42c10d35e2a5f9285c5432e0ec67d1564912cbedd9bf0c4596ed4d307e8db17637c733648ad9f55d407011a1a9ef4681de3ce"], &(0x7f0000000140)=0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f000076f000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r12, 0x80247009, 0x8) 2018/04/05 22:48:28 executing program 1: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns/pid\x00') setns(r0, 0x0) 2018/04/05 22:48:28 executing program 5: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x450, 0x0, 0x22c, 0x114, 0x36c, 0x36c, 0x36c, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x114}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'ip6gre0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xa9251cf) 2018/04/05 22:48:28 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xe0000000, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/05 22:48:28 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000001c0)="2400000020002553075f01650272fcf281000000001000220ee1000c08001700002b0600", 0x24) 2018/04/05 22:48:28 executing program 7: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x200) 2018/04/05 22:48:28 executing program 0: syz_read_part_table(0x100000, 0x1, &(0x7f0000000100)=[{&(0x7f0000010000)="57455682", 0x4, 0x40}]) 2018/04/05 22:48:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet(r0, &(0x7f0000000300), 0x0, 0x20020003, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{&(0x7f0000002940)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003040)="ca23a609268f010dec", 0x9}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340)=0x9, 0x4) 2018/04/05 22:48:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80800000000541b, &(0x7f0000000000)) 2018/04/05 22:48:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') bind$packet(r1, &(0x7f0000000280)={0x11, 0xe1fbb7d3b137be09, r2, 0x1, 0x3, 0x6}, 0x14) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r3 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000500), &(0x7f00000005c0)=0x1ce) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x20, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002100), 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r7 = socket(0xa, 0xb, 0x5) bind$bt_l2cap(r7, &(0x7f00000007c0)={0x1f, 0x101, {0x0, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0x2b, [], 0xa, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/43}, &(0x7f0000000600)=0x78) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x19}, 0xff}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r9, 0x3, 0x20, 0x4, 0x7}, &(0x7f0000000240)=0xffffffffffffff8c) getsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000400), &(0x7f00000004c0)=0x4) 2018/04/05 22:48:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000180)={[{@discard='discard', 0x2c}]}) 2018/04/05 22:48:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/05 22:48:28 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/05 22:48:28 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f000001dff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0x16a7}, &(0x7f000001a000)=[{&(0x7f0000001f34)=""/204, 0xcc}, {&(0x7f000000e000)=""/211, 0xd3}, {&(0x7f0000013f5d)=""/163, 0xa3}, {&(0x7f0000019ff1)=""/15, 0xf}, {&(0x7f0000006fa1)=""/95, 0x5f}, {&(0x7f000001a000)=""/56, 0x38}, {&(0x7f000001bff7)=""/9, 0x3a4}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000012fe5)=""/27, 0x1b}], 0x9}}], 0x48}, 0x0) 2018/04/05 22:48:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000003, 0xc) write(r0, &(0x7f0000000000)="1f0000000a06fd00010000f60000ff0180d0f80009000100020041ec000000", 0x1f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004cc0), &(0x7f0000004d00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) getgroups(0x3, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001800)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001840)={{{@in=@loopback}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000001940)=0xe8) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001d40)) lstat(&(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40)) getresgid(&(0x7f0000004740), &(0x7f0000004780), &(0x7f00000047c0)) 2018/04/05 22:48:28 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000dc0fef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40096102, &(0x7f0000000180)) [ 221.279423] FAT-fs (loop1): mounting with "discard" option, but the device does not support discard [ 221.293886] rdma_op 000000007270511d conn xmit_rdma (null) [ 221.302007] rdma_op 000000008b32da96 conn xmit_rdma (null) [ 221.407720] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 221.457510] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/05 22:48:29 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002600)={&(0x7f0000000100)=@nl=@kern={0x10}, 0x80, &(0x7f0000000200)=[{&(0x7f0000002400)="5500000018007fafc22e1cb2a4a2f9930a06000000a84308910523693900090020000000010000001300050000000000000000dc1338d5440700000000000000fb83de4407aa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000002500)}, 0x0) 2018/04/05 22:48:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000180)={[{@discard='discard', 0x2c}]}) 2018/04/05 22:48:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") 2018/04/05 22:48:29 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./control/file0\x00', r0, &(0x7f000034aff8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d64000)='./file0\x00', &(0x7f0000c22000)={0x8}, &(0x7f0000583000), 0x0) 2018/04/05 22:48:29 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/05 22:48:29 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0071c0165ff0ffc0e02003c000000000000e1000c0800020000000005", 0x24) 2018/04/05 22:48:29 executing program 4: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/05 22:48:29 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lseek(r1, 0x0, 0x0) [ 221.642743] FAT-fs (loop1): mounting with "discard" option, but the device does not support discard 2018/04/05 22:48:29 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7d, &(0x7f0000908000), 0xc) 2018/04/05 22:48:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x20012, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/04/05 22:48:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x8000000000001, 0x0, 0x0, {}, [@nested={0x4, 0xffffffff00000001}]}, 0x18}, 0x1}, 0x0) 2018/04/05 22:48:29 executing program 4: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/05 22:48:29 executing program 2: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaaaf1, &(0x7f00000010c0), 0x0, &(0x7f0000001100)={[{@norgrplvb='norgrplvb', 0x2c}]}) 2018/04/05 22:48:29 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/05 22:48:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000180)={[{@discard='discard', 0x2c}]}) 2018/04/05 22:48:29 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000006e00)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(twofish-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000006c80)=[{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f00000069c0)="df0a76551677fe2b999a5877fbb563fdc798dc6ce2afa279926097216eeaa37606", 0x21}], 0x1, &(0x7f0000006b00)}], 0x1, 0x0) 2018/04/05 22:48:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="393a340d231c04e0c2b076b1172946c7ba3d30"], 0x13) 2018/04/05 22:48:29 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)}]) [ 221.846702] FAT-fs (loop1): mounting with "discard" option, but the device does not support discard 2018/04/05 22:48:29 executing program 4: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) [ 221.916303] binder_alloc: binder_alloc_mmap_handler: 16189 20000000-20002000 already mapped failed -16 2018/04/05 22:48:29 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f000027efd4)={0xa, 0x1, 0x7f, 0x9}, 0x2a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/05 22:48:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000180)={[{@discard='discard', 0x2c}]}) 2018/04/05 22:48:29 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000cb8fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/05 22:48:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/04/05 22:48:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00005b2fc8)={&(0x7f0000c2bff4)={0x10}, 0xc, &(0x7f0000cf8ff0)={&(0x7f0000ce9000)=@newae={0x68, 0x1e, 0x301, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}, @in6=@dev={0xfe, 0x80}}, [@mark={0xc, 0x15}, @replay_esn_val={0x1c, 0x17}]}, 0x68}, 0x1}, 0x0) [ 222.053654] FAT-fs (loop1): mounting with "discard" option, but the device does not support discard 2018/04/05 22:48:29 executing program 6: r0 = socket(0x2, 0x80000000000001, 0x0) setsockopt(r0, 0x6, 0x22, &(0x7f00005b3000)="02000012", 0x4) [ 222.108462] gfs2: invalid mount option: nor [ 222.114035] gfs2: can't parse mount arguments 2018/04/05 22:48:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x20012, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/04/05 22:48:29 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000480)=[{&(0x7f0000000840)="58465342000002000000000000008000000000000000000000000000000000005bfc2f1a415c41dab49211bccbd5f4cb000000000000000700000000000025a000000000000025a100000000000025a200000008000080000000000100000000000012c0b4a4020001000002000000000000000000000000090908010f0000190000000000000040000000000000003d0000000000006d1900000000000000000000000000000000000000000000000000000000000000100000000000000000030000000000000000000000000005f7", 0xd0}], 0x0, &(0x7f0000018900)) 2018/04/05 22:48:29 executing program 1: r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x80005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280), 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x8) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000300)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x5}]}) clock_gettime(0x0, &(0x7f0000000140)) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) [ 222.400150] XFS (loop4): correcting sb_features alignment problem [ 222.421210] XFS (loop4): Mounting V4 Filesystem [ 222.443634] XFS (loop4): totally zeroed log [ 222.453415] XFS (loop4): Metadata corruption detected at xfs_agf_verify+0x52d/0xa10, xfs_agf block 0x1 [ 222.463061] XFS (loop4): Unmount and run xfs_repair [ 222.468120] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 222.474849] 0000000017ee503d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.483742] 0000000079e1565d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.492695] 00000000537afd5c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.501592] 00000000c2ebc5c6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.510472] 00000000dccdb7cb: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.519424] 0000000028f1bda6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.528304] 00000000d0c85620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.537205] 000000002a009087: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.546182] XFS (loop4): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x1 len 1 error 117 [ 222.646390] XFS (loop4): correcting sb_features alignment problem [ 222.653692] XFS (loop4): Mounting V4 Filesystem [ 222.659998] XFS (loop4): totally zeroed log [ 222.665783] XFS (loop4): Metadata corruption detected at xfs_agf_verify+0x52d/0xa10, xfs_agf block 0x1 [ 222.675388] XFS (loop4): Unmount and run xfs_repair [ 222.680699] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 222.687442] 0000000086785905: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.696334] 000000007e0f7661: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.705234] 000000003097fce9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.714101] 000000001a9d6092: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.722978] 00000000011e1ac1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.731837] 000000004c58a7bf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.740721] 0000000059691560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.749576] 0000000003a6940e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.758676] XFS (loop4): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x1 len 1 error 117 2018/04/05 22:48:30 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) sendmsg$key(r0, &(0x7f0000f21000)={0x0, 0x0, &(0x7f0000f21000)={&(0x7f0000000000)=ANY=[@ANYBLOB="02006558050000000000000081009cf2a8c30ea6"], 0x14}, 0x1}, 0x0) 2018/04/05 22:48:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x2284, 0x0) 2018/04/05 22:48:30 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x1) 2018/04/05 22:48:30 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x3) 2018/04/05 22:48:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x20012, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/04/05 22:48:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x6}) 2018/04/05 22:48:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) read(r0, &(0x7f0000001700)=""/179, 0x30) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/04/05 22:48:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f0000000000)) 2018/04/05 22:48:30 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20a}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x6f2000, 0x2, 0x0, &(0x7f0000002ac0)) 2018/04/05 22:48:30 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x800000020, &(0x7f00000001c0)=0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7fff, r2, &(0x7f0000000200)="8a88a47f5eee1d9e036e967005f335aef9d46535fc9718d6e2b3c193715f6e75a455208f6d1539deb8c46d97bb4c551e8142b94b95e855d3a1122fabee7891318a2930ccb9de33cca5524e4ba15f79253fbe9d0957e736b542c9a643aa35749f7b0bfebde23450d5184914caea0b22471fd2bcfa24efce93e3d9c7f998c4e53c6d70809ac4e39818493f50d7a3fee6536a9dc7fad7a0c5578e4589ecb2014d6289a3d7d4bd430b2f7236d34e9e342d53ca3512114817b82458410f889da855b88d6c9b6b70a942a77e30613fd88a11a340", 0xd1, 0xffffffffffff9901, 0x0, 0x1, r0}]) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000440)=""/224, 0xe0) eventfd2(0x6, 0x800) timerfd_gettime(r2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) 2018/04/05 22:48:30 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x103001, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000885000/0x4000)=nil, 0x4000, 0x1000009) futex(&(0x7f0000452000), 0x0, 0x0, &(0x7f00004a4ff0)={0xffffffffffffffff, 0x989680}, &(0x7f0000196000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80000, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {0x3}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x1c}, 0x1}, 0x80) 2018/04/05 22:48:30 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 22:48:30 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 2018/04/05 22:48:30 executing program 4: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff17f, 0x0, 0x290ff291}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:48:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x20012, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/04/05 22:48:31 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffdfe, 0xfffffffffffffffd}) 2018/04/05 22:48:31 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000014c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x800) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) 2018/04/05 22:48:31 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 2018/04/05 22:48:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 2018/04/05 22:48:31 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x80000000000000, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x2fa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000), 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0xd, @broadcast=0xffffffff, 0x0, 0x0, "566c630000000bab000800"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000400)={r0}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x8001}, 0x4) r3 = perf_event_open(&(0x7f00006d1000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu&5 \x00\x00\x00\x00\x00\x00\x00\x00') sendto$ax25(r2, &(0x7f0000000440)="5b9617f54b423fe27a87184d6fb06095630e231fea08109c68803c7c888e282438fe880e49d6eef4dc72028105f573a6990f1cb20d0c0c5867d98be919d89f418a3a59890ec43f8ceb6d054e4a785c2731da59936faab79b3cc971596ab0476ec9c9d86215f04ea8bd871c0c874d1e585824afbd030ece4ebbd9b034adde4ac0c2926fabde77eb0dea402c5a9248b60df63b0d004888c8e55f171ee80c7a61dbcfe7bfd7bd2cfbc37b4f5db12c3eda322903196f051b4363", 0xb8, 0x8000, &(0x7f0000000540)={0x3, {"0b251d74ec7391"}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast2}, &(0x7f0000000a80)=0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0xffff}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={r6, 0x24}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00', r4}) r7 = socket(0x10002, 0x2000, 0x7) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x7ff, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}, {0x2}, 0x2, 0x6, 0x6, 0x3, 0x2, &(0x7f00000003c0)='gretap0\x00', 0x1, 0x3, 0x5}) accept4$ax25(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x800) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000080)="a829e9ec") setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000600)={0x6, {{0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x373}}}, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)=0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000900)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0x562) 2018/04/05 22:48:31 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x800000020, &(0x7f00000001c0)=0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7fff, r2, &(0x7f0000000200)="8a88a47f5eee1d9e036e967005f335aef9d46535fc9718d6e2b3c193715f6e75a455208f6d1539deb8c46d97bb4c551e8142b94b95e855d3a1122fabee7891318a2930ccb9de33cca5524e4ba15f79253fbe9d0957e736b542c9a643aa35749f7b0bfebde23450d5184914caea0b22471fd2bcfa24efce93e3d9c7f998c4e53c6d70809ac4e39818493f50d7a3fee6536a9dc7fad7a0c5578e4589ecb2014d6289a3d7d4bd430b2f7236d34e9e342d53ca3512114817b82458410f889da855b88d6c9b6b70a942a77e30613fd88a11a340", 0xd1, 0xffffffffffff9901, 0x0, 0x1, r0}]) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000440)=""/224, 0xe0) eventfd2(0x6, 0x800) timerfd_gettime(r2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) 2018/04/05 22:48:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)) 2018/04/05 22:48:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001100094701bb61e1c3050000070000000200000045efffff08009b0019001a000f000000030000000000000004e9000206002d0005", 0x39}], 0x1) [ 224.093537] IPVS: set_ctl: invalid protocol: 13 255.255.255.255:0 Vlc 2018/04/05 22:48:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x9, 0x2, 0x9}, &(0x7f0000000200)=0x98) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x1, 0x0, [{0x0, 0xfffffffffffffd15, &(0x7f0000001380)=""/1}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 224.149818] IPVS: set_ctl: invalid protocol: 13 255.255.255.255:0 Vlc 2018/04/05 22:48:31 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000200)=0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="d8", 0x1) sendfile(r3, r3, &(0x7f0000000040), 0x7527fb3200000000) pwritev(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) syncfs(r2) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/250, 0xfa) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) sendfile(r3, r2, &(0x7f0000000180), 0x12000) 2018/04/05 22:48:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)) 2018/04/05 22:48:31 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x80000000000000, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x2fa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000), 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0xd, @broadcast=0xffffffff, 0x0, 0x0, "566c630000000bab000800"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000400)={r0}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x8001}, 0x4) r3 = perf_event_open(&(0x7f00006d1000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu&5 \x00\x00\x00\x00\x00\x00\x00\x00') sendto$ax25(r2, &(0x7f0000000440)="5b9617f54b423fe27a87184d6fb06095630e231fea08109c68803c7c888e282438fe880e49d6eef4dc72028105f573a6990f1cb20d0c0c5867d98be919d89f418a3a59890ec43f8ceb6d054e4a785c2731da59936faab79b3cc971596ab0476ec9c9d86215f04ea8bd871c0c874d1e585824afbd030ece4ebbd9b034adde4ac0c2926fabde77eb0dea402c5a9248b60df63b0d004888c8e55f171ee80c7a61dbcfe7bfd7bd2cfbc37b4f5db12c3eda322903196f051b4363", 0xb8, 0x8000, &(0x7f0000000540)={0x3, {"0b251d74ec7391"}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast2}, &(0x7f0000000a80)=0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0xffff}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={r6, 0x24}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00', r4}) r7 = socket(0x10002, 0x2000, 0x7) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x7ff, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}, {0x2}, 0x2, 0x6, 0x6, 0x3, 0x2, &(0x7f00000003c0)='gretap0\x00', 0x1, 0x3, 0x5}) accept4$ax25(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x800) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000080)="a829e9ec") setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000600)={0x6, {{0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x373}}}, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)=0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000900)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0x562) [ 224.265305] binder: 16366:16367 ioctl c018620b 20000400 returned -14 [ 224.286660] IPVS: set_ctl: invalid protocol: 13 255.255.255.255:0 Vlc 2018/04/05 22:48:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) 2018/04/05 22:48:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[], 0x0, 0x80}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="673e0f009d8dfbcab566660f54583df30f704c000066b8010000000f01c164650feb3f66b9800000c00f326635001000000f30ba610066b80090000066ef660f14ea66b80500000066b94300c0fe0f01c10f20d86635200000000f22d8", 0x5d}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 224.313446] binder: 16366:16374 ioctl c018620b 20000400 returned -14 2018/04/05 22:48:31 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00006ae000)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/05 22:48:31 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x80000000000000, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x2fa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000), 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0xd, @broadcast=0xffffffff, 0x0, 0x0, "566c630000000bab000800"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000400)={r0}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x8001}, 0x4) r3 = perf_event_open(&(0x7f00006d1000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu&5 \x00\x00\x00\x00\x00\x00\x00\x00') sendto$ax25(r2, &(0x7f0000000440)="5b9617f54b423fe27a87184d6fb06095630e231fea08109c68803c7c888e282438fe880e49d6eef4dc72028105f573a6990f1cb20d0c0c5867d98be919d89f418a3a59890ec43f8ceb6d054e4a785c2731da59936faab79b3cc971596ab0476ec9c9d86215f04ea8bd871c0c874d1e585824afbd030ece4ebbd9b034adde4ac0c2926fabde77eb0dea402c5a9248b60df63b0d004888c8e55f171ee80c7a61dbcfe7bfd7bd2cfbc37b4f5db12c3eda322903196f051b4363", 0xb8, 0x8000, &(0x7f0000000540)={0x3, {"0b251d74ec7391"}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast2}, &(0x7f0000000a80)=0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0xffff}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={r6, 0x24}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00', r4}) r7 = socket(0x10002, 0x2000, 0x7) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x7ff, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}, {0x2}, 0x2, 0x6, 0x6, 0x3, 0x2, &(0x7f00000003c0)='gretap0\x00', 0x1, 0x3, 0x5}) accept4$ax25(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x800) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000080)="a829e9ec") setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000600)={0x6, {{0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x373}}}, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)=0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000900)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0x562) [ 224.441542] IPVS: set_ctl: invalid protocol: 13 255.255.255.255:0 Vlc 2018/04/05 22:48:33 executing program 0: socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f000001b000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f0000000140), &(0x7f00000000c0)=0x3d4) 2018/04/05 22:48:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, &(0x7f00000000c0), &(0x7f0000000ffc), 0x0) 2018/04/05 22:48:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x100000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r0, &(0x7f0000eed000), &(0x7f0000b88000)}, 0x20) 2018/04/05 22:48:33 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x80000000000000, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x2fa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000), 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0xd, @broadcast=0xffffffff, 0x0, 0x0, "566c630000000bab000800"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000400)={r0}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x8001}, 0x4) r3 = perf_event_open(&(0x7f00006d1000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu&5 \x00\x00\x00\x00\x00\x00\x00\x00') sendto$ax25(r2, &(0x7f0000000440)="5b9617f54b423fe27a87184d6fb06095630e231fea08109c68803c7c888e282438fe880e49d6eef4dc72028105f573a6990f1cb20d0c0c5867d98be919d89f418a3a59890ec43f8ceb6d054e4a785c2731da59936faab79b3cc971596ab0476ec9c9d86215f04ea8bd871c0c874d1e585824afbd030ece4ebbd9b034adde4ac0c2926fabde77eb0dea402c5a9248b60df63b0d004888c8e55f171ee80c7a61dbcfe7bfd7bd2cfbc37b4f5db12c3eda322903196f051b4363", 0xb8, 0x8000, &(0x7f0000000540)={0x3, {"0b251d74ec7391"}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast2}, &(0x7f0000000a80)=0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0xffff}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={r6, 0x24}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00', r4}) r7 = socket(0x10002, 0x2000, 0x7) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x7ff, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}, {0x2}, 0x2, 0x6, 0x6, 0x3, 0x2, &(0x7f00000003c0)='gretap0\x00', 0x1, 0x3, 0x5}) accept4$ax25(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x800) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000080)="a829e9ec") setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000600)={0x6, {{0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x373}}}, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)=0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000900)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0x562) 2018/04/05 22:48:33 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x800000020, &(0x7f00000001c0)=0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7fff, r2, &(0x7f0000000200)="8a88a47f5eee1d9e036e967005f335aef9d46535fc9718d6e2b3c193715f6e75a455208f6d1539deb8c46d97bb4c551e8142b94b95e855d3a1122fabee7891318a2930ccb9de33cca5524e4ba15f79253fbe9d0957e736b542c9a643aa35749f7b0bfebde23450d5184914caea0b22471fd2bcfa24efce93e3d9c7f998c4e53c6d70809ac4e39818493f50d7a3fee6536a9dc7fad7a0c5578e4589ecb2014d6289a3d7d4bd430b2f7236d34e9e342d53ca3512114817b82458410f889da855b88d6c9b6b70a942a77e30613fd88a11a340", 0xd1, 0xffffffffffff9901, 0x0, 0x1, r0}]) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000440)=""/224, 0xe0) eventfd2(0x6, 0x800) timerfd_gettime(r2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) 2018/04/05 22:48:33 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 2018/04/05 22:48:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) 2018/04/05 22:48:33 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000200)=0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="d8", 0x1) sendfile(r3, r3, &(0x7f0000000040), 0x7527fb3200000000) pwritev(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) syncfs(r2) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/250, 0xfa) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) sendfile(r3, r2, &(0x7f0000000180), 0x12000) 2018/04/05 22:48:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, &(0x7f00000000c0), &(0x7f0000000ffc), 0x0) 2018/04/05 22:48:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000490000000000080001"]) 2018/04/05 22:48:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4000000000000006}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="0cd57b85eba93a96ade37bb5cc779cfa44385ca8bfc579860c604b628df3247aae13b4d6bd91acf69f", 0x29}], 0x1, &(0x7f0000000800)}, 0x0) [ 225.755196] IPVS: set_ctl: invalid protocol: 13 255.255.255.255:0 Vlc 2018/04/05 22:48:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000400)=r0) [ 225.886664] unchecked MSR access error: WRMSR to 0x49 (tried to write 0x0000000000000001) at rIP: 0xffffffff81335b98 (native_write_msr+0x8/0x30) [ 225.899906] Call Trace: [ 225.902564] vmx_set_msr+0xd67/0x1fa0 [ 225.906424] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 225.911540] ? __check_object_size+0x95/0x5d9 [ 225.916124] kvm_set_msr+0x18a/0x370 [ 225.919905] do_set_msr+0x106/0x190 [ 225.923589] ? do_get_msr+0x1d0/0x1d0 [ 225.927470] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 225.933075] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 225.938693] msr_io+0x21a/0x360 [ 225.942079] ? do_get_msr+0x1d0/0x1d0 [ 225.945944] ? copy_overflow+0x30/0x30 [ 225.950388] kvm_arch_vcpu_ioctl+0x14cb/0x4e60 [ 225.955055] ? kvm_arch_vcpu_ioctl+0x1479/0x4e60 [ 225.959877] ? kvm_arch_vcpu_put+0x420/0x420 [ 225.964365] ? perf_trace_lock_acquire+0xe3/0x980 [ 225.969259] ? __sched_text_start+0x8/0x8 [ 225.973471] ? plist_check_list+0x7e/0xa0 [ 225.977689] ? perf_trace_lock+0x900/0x900 [ 225.982012] ? find_held_lock+0x36/0x1c0 2018/04/05 22:48:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, &(0x7f00000000c0), &(0x7f0000000ffc), 0x0) 2018/04/05 22:48:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x2, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000140), 0x10) bind$rds(r1, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c5580000040000000000f07531dc6150defaca6eddaf1b8b8c36184c8f013be96ea31efbd29ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbd7430f3aa50c6a17a4cbe46f9a27f671d171c4a2450f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x2, 0x1, 0x80000001, 0x1]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='eth1\x00', 0x5, 0x1) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000400)={0x1, 0x100000001}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1002800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x81) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) rt_sigqueueinfo(r3, 0x16, &(0x7f00000001c0)={0x9, 0x8, 0x7}) fcntl$setlease(r1, 0x400, 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) pread64(r1, &(0x7f0000000200)=""/102, 0x66, 0x0) [ 225.986174] ? lock_acquire+0x1dc/0x520 [ 225.990209] ? kvm_vcpu_ioctl+0x1e2/0x12e0 [ 225.994492] ? lock_release+0xa10/0xa10 [ 225.998563] ? rcu_note_context_switch+0x710/0x710 [ 226.003563] ? __might_sleep+0x95/0x190 [ 226.007603] ? kasan_check_write+0x14/0x20 [ 226.011894] ? __mutex_lock+0x7d9/0x17f0 [ 226.016005] ? kasan_check_write+0x14/0x20 [ 226.020327] ? do_raw_spin_lock+0xc1/0x200 [ 226.024626] ? kvm_vcpu_ioctl+0x1e2/0x12e0 [ 226.028907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.034528] ? print_usage_bug+0xc0/0xc0 [ 226.038644] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 226.043719] ? mutex_trylock+0x2a0/0x2a0 [ 226.047829] ? futex_wake+0x750/0x750 [ 226.051689] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 226.056938] ? __lock_acquire+0x7f5/0x5130 [ 226.061248] ? debug_check_no_locks_freed+0x310/0x310 [ 226.066485] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 226.071660] ? futex_wake+0x2f6/0x750 [ 226.075513] ? kvm_set_memory_region+0x50/0x50 [ 226.080157] ? get_futex_key+0x1e90/0x1e90 2018/04/05 22:48:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x20000000000019) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfb) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, {{@in6}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x4, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x108) [ 226.084438] ? find_held_lock+0x36/0x1c0 [ 226.088558] ? perf_trace_lock_acquire+0xe3/0x980 [ 226.093448] ? perf_trace_lock+0x900/0x900 [ 226.097738] ? do_futex+0x249/0x27d0 [ 226.101514] kvm_vcpu_ioctl+0x27e/0x12e0 [ 226.105643] ? kvm_vcpu_fault+0x5f0/0x5f0 [ 226.109838] ? exit_robust_list+0x290/0x290 [ 226.114229] ? find_held_lock+0x36/0x1c0 [ 226.118343] ? lock_downgrade+0x8e0/0x8e0 [ 226.122559] ? kasan_check_read+0x11/0x20 [ 226.126757] ? rcu_is_watching+0x85/0x140 [ 226.130972] ? rcu_bh_force_quiescent_state+0x20/0x20 2018/04/05 22:48:33 executing program 3: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) [ 226.136218] ? __fget+0x40c/0x650 [ 226.139737] ? expand_files.part.8+0x9a0/0x9a0 [ 226.144363] ? trace_hardirqs_off+0xd/0x10 [ 226.148660] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 226.153818] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 226.159064] ? kvm_vcpu_fault+0x5f0/0x5f0 [ 226.163251] do_vfs_ioctl+0x1cf/0x1650 [ 226.167194] ? ioctl_preallocate+0x2e0/0x2e0 [ 226.171641] ? fget_raw+0x20/0x20 [ 226.175262] ? kmem_cache_free+0x25c/0x2d0 [ 226.179543] ? SyS_futex+0x3a4/0x56d [ 226.183302] ? exit_to_usermode_loop+0x87/0x310 [ 226.188010] ? do_futex+0x27d0/0x27d0 [ 226.191894] ? security_file_ioctl+0x9b/0xd0 [ 226.196358] ksys_ioctl+0xa9/0xd0 [ 226.199854] SyS_ioctl+0x24/0x30 [ 226.203274] ? ksys_ioctl+0xd0/0xd0 [ 226.206945] do_syscall_64+0x29e/0x9d0 [ 226.210883] ? vmalloc_sync_all+0x30/0x30 [ 226.215073] ? _raw_spin_unlock_irq+0x27/0x70 [ 226.219623] ? finish_task_switch+0x1ca/0x820 [ 226.224161] ? syscall_return_slowpath+0x5c0/0x5c0 [ 226.229147] ? syscall_return_slowpath+0x30f/0x5c0 [ 226.234143] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 226.239577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.244484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 226.249719] RIP: 0033:0x4552d9 [ 226.252959] RSP: 002b:00007fd84f72ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.260725] RAX: ffffffffffffffda RBX: 00007fd84f72f6d4 RCX: 00000000004552d9 [ 226.268056] RDX: 0000000020000080 RSI: 000000004008ae89 RDI: 0000000000000015 [ 226.275375] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 226.282695] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 226.290005] R13: 0000000000000263 R14: 00000000006f69e8 R15: 0000000000000000 2018/04/05 22:48:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, &(0x7f00000000c0), &(0x7f0000000ffc), 0x0) 2018/04/05 22:48:34 executing program 3: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2018/04/05 22:48:34 executing program 7: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2018/04/05 22:48:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x2', 0x3) 2018/04/05 22:48:34 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)) 2018/04/05 22:48:34 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 2018/04/05 22:48:34 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000200)=0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="d8", 0x1) sendfile(r3, r3, &(0x7f0000000040), 0x7527fb3200000000) pwritev(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) syncfs(r2) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/250, 0xfa) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) sendfile(r3, r2, &(0x7f0000000180), 0x12000) 2018/04/05 22:48:34 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x800000020, &(0x7f00000001c0)=0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7fff, r2, &(0x7f0000000200)="8a88a47f5eee1d9e036e967005f335aef9d46535fc9718d6e2b3c193715f6e75a455208f6d1539deb8c46d97bb4c551e8142b94b95e855d3a1122fabee7891318a2930ccb9de33cca5524e4ba15f79253fbe9d0957e736b542c9a643aa35749f7b0bfebde23450d5184914caea0b22471fd2bcfa24efce93e3d9c7f998c4e53c6d70809ac4e39818493f50d7a3fee6536a9dc7fad7a0c5578e4589ecb2014d6289a3d7d4bd430b2f7236d34e9e342d53ca3512114817b82458410f889da855b88d6c9b6b70a942a77e30613fd88a11a340", 0xd1, 0xffffffffffff9901, 0x0, 0x1, r0}]) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000440)=""/224, 0xe0) eventfd2(0x6, 0x800) timerfd_gettime(r2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) 2018/04/05 22:48:34 executing program 7: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2018/04/05 22:48:34 executing program 3: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2018/04/05 22:48:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x2', 0x3) 2018/04/05 22:48:34 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000200)}, 0x1) memfd_create(&(0x7f0000000140)="6d696d655f74797065da70726f63776c616e31403a766d6e657430656d30726d643573756d73797374656d7070703000", 0x0) ftruncate(r0, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x801, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) 2018/04/05 22:48:34 executing program 7: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2018/04/05 22:48:34 executing program 3: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2018/04/05 22:48:35 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)) 2018/04/05 22:48:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x2', 0x3) 2018/04/05 22:48:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00004d7000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/04/05 22:48:35 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000883000)={&(0x7f0000000980)=@setlink={0x44, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x24, 0x16, [{0x20, 0x1, [@nested={0x1c, 0x5, [@typed={0x18, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}]}]}, 0x44}, 0x1}, 0x0) 2018/04/05 22:48:35 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000140)='p{', 0x2, 0x4000010, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) 2018/04/05 22:48:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f000051b000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0xc0481273, &(0x7f000084cf90)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 2018/04/05 22:48:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000e5fff4)={0x10}, 0xc, &(0x7f0000fb7000)={&(0x7f0000aeccc8)={0x14, 0x3, 0x1, 0x7fffffffd}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:35 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000200)=0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="d8", 0x1) sendfile(r3, r3, &(0x7f0000000040), 0x7527fb3200000000) pwritev(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) syncfs(r2) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/250, 0xfa) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) sendfile(r3, r2, &(0x7f0000000180), 0x12000) 2018/04/05 22:48:35 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 22:48:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x30001}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)) 2018/04/05 22:48:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x2', 0x3) 2018/04/05 22:48:35 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mknod(&(0x7f0000000840)='./file0\x00', 0x3, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x200) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000ff6fe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) 2018/04/05 22:48:35 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x2, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000200)="be", &(0x7f0000000300)=""/168}, 0x18) 2018/04/05 22:48:35 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)}]) 2018/04/05 22:48:35 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 22:48:35 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x346, 0x4) [ 228.981907] net_ratelimit: 1 callbacks suppressed [ 228.981917] Dead loop on virtual device ip6_vti0, fix it urgently! 2018/04/05 22:48:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00004d7000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/04/05 22:48:36 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000440)='hfsplus\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@umask={'umask', 0x3d, [0x34]}, 0x2c}, {@decompose='decompose', 0x2c}]}) 2018/04/05 22:48:36 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='..', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x20) 2018/04/05 22:48:36 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) semtimedop(0x0, &(0x7f000001dfd6)=[{}], 0x1, &(0x7f0000380000)={0x101}) 2018/04/05 22:48:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='selinuxfs\x00', 0x1000, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x24, 0x25, 0x7a}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) timer_gettime(0x0, &(0x7f00000002c0)) 2018/04/05 22:48:36 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)) 2018/04/05 22:48:36 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000680)=@sco, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000080)=""/253, 0xfd}, 0x2) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f000002efc0), 0x0, &(0x7f0000006fa0)}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}}, &(0x7f0000000200)=0x84) fallocate(r0, 0x0, 0x10000, 0x2) mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x2, 0x11, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000008140), &(0x7f0000008180)=0x10) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000600), 0x9, 0x2) clock_gettime(0x6, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0xff, 0xfffffffffffffff7, 0x7, {r2, r3+10000000}, 0x4, 0x5}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)=0x5000) 2018/04/05 22:48:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 22:48:36 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) [ 229.114521] hfsplus: unable to find HFS+ superblock 2018/04/05 22:48:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000000000000000000000000001000000000000000000000000000000000000000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 229.130175] syz-executor3[16604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.140012] syz-executor3[16604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.164967] hfsplus: unable to find HFS+ superblock 2018/04/05 22:48:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 22:48:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x4}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 22:48:36 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 22:48:36 executing program 2: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) getrandom(&(0x7f0000000600)=""/184, 0xb8, 0x0) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000002c80)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x3e4, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) 2018/04/05 22:48:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 22:48:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') pread64(r0, &(0x7f0000000040)=""/100, 0x64, 0x1d) 2018/04/05 22:48:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) 2018/04/05 22:48:37 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:37 executing program 5: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) 2018/04/05 22:48:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000040)={"9d720600000030000200000000000001"}) 2018/04/05 22:48:37 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)) 2018/04/05 22:48:37 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)=0xffdffffffffffffe) ppoll(&(0x7f0000000000)=[{r0, 0x5d5}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 22:48:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00004d7000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/04/05 22:48:37 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e1) sendfile(r1, r2, &(0x7f0000145000), 0x5abc) 2018/04/05 22:48:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x4, 0x40, 0x6}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x10) 2018/04/05 22:48:37 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x20000000000000a8, &(0x7f0000000140)}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/05 22:48:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1, &(0x7f0000000340)=""/67, 0x43}, 0x0) 2018/04/05 22:48:37 executing program 3: setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) prctl$setmm(0x23, 0x2, &(0x7f0000860000/0x4000)=nil) 2018/04/05 22:48:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:37 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@pppol2tp, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/111, 0x6f}, 0x42) 2018/04/05 22:48:37 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2423) 2018/04/05 22:48:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x51}, {}], 0x30) 2018/04/05 22:48:38 executing program 2: r0 = socket(0x11, 0x4000000000080003, 0x0) ioctl$void(r0, 0x5450) 2018/04/05 22:48:38 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:38 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff80}) 2018/04/05 22:48:38 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:38 executing program 2: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000140)=0x54) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0xfffffffffffffd55) prlimit64(0x0, 0x0, 0x0, &(0x7f00000003c0)) 2018/04/05 22:48:38 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) 2018/04/05 22:48:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:38 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x4305}}}, &(0x7f0000000000)) 2018/04/05 22:48:38 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00004d7000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 231.120607] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 22:48:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)=')\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000868ff3)='/dev/snd/seq\x00', 0x0, 0x8000040000105) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x22, 0x0, 0x0, 0x0, @time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0), &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000740)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}, &(0x7f0000000800)=0x98) 2018/04/05 22:48:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/04/05 22:48:38 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:48:38 executing program 5: set_mempolicy(0xc003, &(0x7f0000000040), 0x0) 2018/04/05 22:48:38 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:48:38 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000b89fe4)=@req3={0x10001}, 0x1c) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000b89fe4)=@req3={0x10001, 0x0, 0x1, 0x1df9}, 0x1c) sendmsg(r1, &(0x7f0000030000)={&(0x7f0000000000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000002400), 0x0, &(0x7f00006e9c68)}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) 2018/04/05 22:48:38 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000a00000002007a2300d1409492d4000005000000000000807f000000000000000000000000000000"]) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r4 = gettid() r5 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x5, 0x1, r4, 0xb, r5, 0x9}) keyctl$session_to_parent(0x12) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000180)={0x9, 0xfae, 0x4}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @broadcast}, &(0x7f0000000040)=0xc) 2018/04/05 22:48:39 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000629ffc)=0x2, 0x2) 2018/04/05 22:48:39 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:48:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000200)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x20000201, &(0x7f0000000100)}) 2018/04/05 22:48:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e382"}], 0x28}}], 0x2, 0x0) 2018/04/05 22:48:39 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0xe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}]}, 0x28}, 0x1}, 0x0) 2018/04/05 22:48:39 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, @rand_addr}, &(0x7f0000000140)=0xc) fallocate(r0, 0x0, 0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000001c0)=0x4) fallocate(r0, 0x0, 0x4b99, 0xf2) recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000340)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x56624ba9}, 0x10001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/37, 0x25}], 0x7, &(0x7f0000001a00)=""/151, 0x97, 0x1}, 0x100000001}, {{&(0x7f0000001ac0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)}], 0x1, &(0x7f0000001bc0)=""/115, 0x73, 0x9}, 0x15}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/178, 0xb2}], 0x1, &(0x7f0000001dc0)=""/205, 0xcd, 0x6}, 0x3}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/199, 0xc7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/110, 0x6e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/43, 0x2b}], 0x9, &(0x7f0000003640)=""/92, 0x5c, 0x7}, 0x1f}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/216, 0xd8}], 0x3, &(0x7f0000005940)=""/38, 0x26, 0x2}, 0x3}, {{&(0x7f0000005980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005a00)=""/33, 0x21}, {&(0x7f0000005a40)=""/150, 0x96}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/205, 0xcd}], 0x4, &(0x7f0000006c40)=""/125, 0x7d, 0x10000}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000006e80)={0x0, 0x1c9c380}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000008040)={0x5, 0x2000000000000, 0x2, 0x3, 0x3, 0x0, 0x2, 0xeb67, 0x7, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000006f80)='user\x00', &(0x7f0000006fc0)={0x73, 0x79, 0x7a}, &(0x7f0000007000)='/dev/vhost-net\x00', 0xfffffffffffffffb) add_key(&(0x7f0000001b40)='cifs.idmap\x00', &(0x7f0000006ec0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000006f00)="bb602993b5d93f981545f37d3449670173d6c4192dc58559cec5562790cc75c2d742cdded948d55166218d0ece0ebd0af7d6cb38", 0x34, r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='mime_type*&vboxnet1vboxnet0\x00', 0xfffffffffffffff9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc08f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = dup3(r5, r4, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='6:4\r'], 0x4) preadv(r6, &(0x7f0000002440)=[{&(0x7f0000000140)=""/38, 0xffec}], 0x1, 0x2) flistxattr(r0, &(0x7f0000007040)=""/4096, 0x1000) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="d5", 0x1}], 0x1, 0x0) 2018/04/05 22:48:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet_int(r1, 0x0, 0x100000002, &(0x7f00000000c0)=0x12, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) 2018/04/05 22:48:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000011200)="ff4344303031", 0x6, 0x9800}], 0x0, &(0x7f0000000040)) 2018/04/05 22:48:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in6={0xa, 0x4e24, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000040)=[{0x10, 0x1, 0x24}], 0x10}}], 0x2, 0x0) 2018/04/05 22:48:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 2018/04/05 22:48:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000200)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x20000201, &(0x7f0000000100)}) 2018/04/05 22:48:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) [ 232.349542] ISOFS: Unable to identify CD-ROM format. 2018/04/05 22:48:39 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000200)={0x0, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}}, &(0x7f0000000400)=0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 232.419226] ISOFS: Unable to identify CD-ROM format. [ 232.623801] kvm: pic: single mode not supported 2018/04/05 22:48:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x30d) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) close(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bcsh0\x00'}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x42e, 0x0, 0x9}) socket$inet(0x2, 0x0, 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000600), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x20, &(0x7f0000000280)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x8}}}, 0x84) 2018/04/05 22:48:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000200)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x20000201, &(0x7f0000000100)}) 2018/04/05 22:48:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000051b000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x1275, &(0x7f0000000040)) 2018/04/05 22:48:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x2000000000004, 0x219}, 0x3f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) 2018/04/05 22:48:40 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000011200)="ff4344303031", 0x6, 0x9800}], 0x0, &(0x7f0000000040)) 2018/04/05 22:48:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/05 22:48:40 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:40 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:41 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) [ 232.624145] kvm: pic: level sensitive irq not supported [ 233.406125] ISOFS: Unable to identify CD-ROM format. [ 233.423482] ALSA: seq fatal error: cannot create timer (-22) 2018/04/05 22:48:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) socketpair(0x8, 0x2, 0x56, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {0x9}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x521d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r4 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x10001, 0x280000) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000480)={0x8000, 0x1, 0x8, 0x9859, 0x6, 0x2, 0x6d5d, 0x2, 0x0, 0xfffffffffffffffa, 0x3}, 0xb) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) close(r1) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000200)='./file0\x00', r6, r7) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000004c0)={0x1ff00000000000, 0x1, 0x2, 0x7, 0x9, 0x9, 0x1, 0x0, 0x0, 0x8}) dup2(r0, r1) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x14) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000180), &(0x7f00000001c0)='/dev/snd/seq\x00') 2018/04/05 22:48:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000200)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x20000201, &(0x7f0000000100)}) [ 233.535288] ALSA: seq fatal error: cannot create timer (-22) 2018/04/05 22:48:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000011200)="ff4344303031", 0x6, 0x9800}], 0x0, &(0x7f0000000040)) 2018/04/05 22:48:41 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0xa, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xd8}, 0x1}, 0x0) 2018/04/05 22:48:41 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic={0x2}) 2018/04/05 22:48:41 executing program 2: syz_mount_image$reiserfs(&(0x7f0000002640)='reiserfs\x00', &(0x7f0000002680)='./file0\x00', 0x0, 0x0, &(0x7f0000003980), 0x0, &(0x7f0000003a00)={[{@jdev={'jdev', 0x3d, "2f2f66696c653002"}, 0x2c}, {@jdev={'jdev', 0x3d, "2f2f66696c653002"}, 0x2c}]}) [ 233.715299] ISOFS: Unable to identify CD-ROM format. 2018/04/05 22:48:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 233.853712] REISERFS warning (device loop2): super-6510 reiserfs_parse_options: journal device was already specified to be //file0 [ 233.883787] REISERFS warning (device loop2): super-6510 reiserfs_parse_options: journal device was already specified to be //file0 2018/04/05 22:48:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000011200)="ff4344303031", 0x6, 0x9800}], 0x0, &(0x7f0000000040)) 2018/04/05 22:48:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/05 22:48:41 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) 2018/04/05 22:48:42 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/05 22:48:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000001000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000100)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/05 22:48:42 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:42 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) [ 234.501175] ISOFS: Unable to identify CD-ROM format. 2018/04/05 22:48:42 executing program 6: munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000) get_mempolicy(&(0x7f0000000180), &(0x7f0000000140), 0x80000001, &(0x7f0000ffc000/0x1000)=nil, 0x3) 2018/04/05 22:48:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/05 22:48:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000fcc000)={0x0, 0xe, &(0x7f0000fcc000)="eb375d06e0aa0000211facffffff"}) 2018/04/05 22:48:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/05 22:48:42 executing program 6: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x400000000000001, '\v'}, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) fsync(r0) 2018/04/05 22:48:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000651ff8), 0x8) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='IPVS\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="12200007000000000101000000"], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x0, 0x8008, 0x80000001, 0xffffffffffffff80, 0x2, 0x0, 0x800}, 0x20) syslog(0x0, &(0x7f0000000100)=""/26, 0x1a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/05 22:48:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="66c05037410329bef8f79af5becd17bc1b0f3a0f9c32714805b671810246baa9d073c10aab0be5525d42017a3bdf3ae597061dc588f5368e247572f10b4767ef0e992dc7a986e501bd93da926943b4a7c3ac8fffdd32b99a2f8fb58a1190d710a1c34a6df73549e6207e237bb5c53657397e3ab43359a146a6cdce434a521cb5a84fab3c872c3aa64afde95d57e7c9e180dacf99922b30fc2481548ccde4d2070b80ad569183f3f8d152fc1249fe416bc60a218c042511448a28c45bfd377b39545f7d1ae96cc7", 0xc7}], 0x1, 0x1) 2018/04/05 22:48:42 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000001000f22e0f3f7266cf3ba4200b80000eff30fc235ec640f322edd9b56a1660f3a0fe9003e660f66fb0f01cb2a62b2", 0x36}], 0xe4, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 22:48:42 executing program 6: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x400000000000001, '\v'}, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) fsync(r0) 2018/04/05 22:48:42 executing program 1: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x9}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={r1, 0x8001}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x40) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0xfffffffffffffff8, 0x8, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) write$sndseq(r3, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r6}) r7 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) close(0xffffffffffffffff) flistxattr(r0, &(0x7f0000000480)=""/144, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002000)=ANY=[]}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000002000)) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) alarm(0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r8, 0x5}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) signalfd4(r2, &(0x7f0000000180)={0x40}, 0x8, 0x80800) 2018/04/05 22:48:42 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:42 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = gettid() r2 = getpid() process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001500)=""/100, 0x64}], 0x1, 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 22:48:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000001000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000100)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/05 22:48:42 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000013c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x20000000000003, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 235.439843] sctp: [Deprecated]: syz-executor4 (pid 17003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.439843] Use struct sctp_sack_info instead 2018/04/05 22:48:43 executing program 6: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x400000000000001, '\v'}, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) fsync(r0) 2018/04/05 22:48:43 executing program 1: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x9}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={r1, 0x8001}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x40) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0xfffffffffffffff8, 0x8, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) write$sndseq(r3, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r6}) r7 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) close(0xffffffffffffffff) flistxattr(r0, &(0x7f0000000480)=""/144, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002000)=ANY=[]}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000002000)) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) alarm(0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r8, 0x5}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) signalfd4(r2, &(0x7f0000000180)={0x40}, 0x8, 0x80800) 2018/04/05 22:48:43 executing program 6: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x400000000000001, '\v'}, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) fsync(r0) 2018/04/05 22:48:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x20000000400448c9, &(0x7f0000000040)) 2018/04/05 22:48:43 executing program 6: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700)={'nouuid,', {[{@logbufs={'logbufs', 0x3d, [0x38, 0x0]}, 0x2c}]}}) 2018/04/05 22:48:43 executing program 1: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x9}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={r1, 0x8001}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x40) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0xfffffffffffffff8, 0x8, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) write$sndseq(r3, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r6}) r7 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) close(0xffffffffffffffff) flistxattr(r0, &(0x7f0000000480)=""/144, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002000)=ANY=[]}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000002000)) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) alarm(0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r8, 0x5}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) signalfd4(r2, &(0x7f0000000180)={0x40}, 0x8, 0x80800) 2018/04/05 22:48:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) [ 235.905421] XFS (loop6): Invalid superblock magic number 2018/04/05 22:48:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00'}) r2 = socket$packet(0x11, 0x200000002, 0x300) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e23}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000004b669462dcbccf65a4193681f6c20000000000000000000000000010fcacc1acdbfe05ecf377b5a32fdefca37cd7e586a4913cf83f3bc81f912ab02c5edb16ebc24fbbd375700e1841afcdd884a6f3c7251b7f213a12b741f6e4f8441caac3558f35347e4c5fd6dac6ad08c27e3131c3d08cedc18711bbe983f42f1b335e5e8e442ffb1d45b14c0b2b56685fc227fe8f"], &(0x7f00000002c0)=0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280), 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000640)=0x4) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x20, 0x9, 0x3, 0x7a58}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) r6 = socket$packet(0x11, 0x3, 0x300) listen(r6, 0xca) sendmsg(r5, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) close(r2) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_int(r8, 0x21, 0x0, &(0x7f0000000340)=0x8, 0x7f) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000840), &(0x7f0000000600)=0x4) accept(r7, &(0x7f0000000880)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000005c0)=0xfffffe62) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000540)=0x12b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$nfc_llcp(r9, &(0x7f00000043c0)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x7, 0x1, "25d08a89aae8837f726687326421747920ae1968e20cd373699fd8daea2d68bf7ee425535bff91167faa35b33054f80bdbebfd95e453d17a63c514ad40b02b", 0x16}, 0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000640)=ANY=[]}], 0x1, 0x4800) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="b61f5fbc87c3def18b1cf2c7ce72463e5865356ea72551a57a3daf837c627eab11c7d4b7f94f9496b55c47c2393bd1309cb77d9156e019db0c95a5035697ad0a198bb834cd2a33b641c4ed7b1c3bada740c5c4e29ec34ea3ed79ee2f2635407dd6c5da3b712f3f69710ac2bd4333e053e3e52a8288e1a89033773981693897d4cfbf1fbc8bb84c7860c0c70f14668ad299e5fe97065644e7"], 0x1) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000082c3964cc69610650a9e4c8700e2701bb60689080045000028000000010000000e00bac5ffcf165bf8dc00010000805c2a91e414699d955c"], &(0x7f0000ea3000)) [ 235.986070] XFS (loop6): Invalid superblock magic number [ 236.016863] device lo left promiscuous mode [ 236.265151] sctp: [Deprecated]: syz-executor4 (pid 17003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.265151] Use struct sctp_sack_info instead 2018/04/05 22:48:43 executing program 6: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700)={'nouuid,', {[{@logbufs={'logbufs', 0x3d, [0x38, 0x0]}, 0x2c}]}}) 2018/04/05 22:48:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00008e5ff6)='/dev/cuse\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 22:48:43 executing program 1: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x9}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={r1, 0x8001}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x40) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0xfffffffffffffff8, 0x8, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) write$sndseq(r3, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r6}) r7 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) close(0xffffffffffffffff) flistxattr(r0, &(0x7f0000000480)=""/144, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002000)=ANY=[]}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000002000)) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) alarm(0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r8, 0x5}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) signalfd4(r2, &(0x7f0000000180)={0x40}, 0x8, 0x80800) 2018/04/05 22:48:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00'}) r2 = socket$packet(0x11, 0x200000002, 0x300) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e23}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000004b669462dcbccf65a4193681f6c20000000000000000000000000010fcacc1acdbfe05ecf377b5a32fdefca37cd7e586a4913cf83f3bc81f912ab02c5edb16ebc24fbbd375700e1841afcdd884a6f3c7251b7f213a12b741f6e4f8441caac3558f35347e4c5fd6dac6ad08c27e3131c3d08cedc18711bbe983f42f1b335e5e8e442ffb1d45b14c0b2b56685fc227fe8f"], &(0x7f00000002c0)=0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280), 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000640)=0x4) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x20, 0x9, 0x3, 0x7a58}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) r6 = socket$packet(0x11, 0x3, 0x300) listen(r6, 0xca) sendmsg(r5, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) close(r2) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_int(r8, 0x21, 0x0, &(0x7f0000000340)=0x8, 0x7f) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000840), &(0x7f0000000600)=0x4) accept(r7, &(0x7f0000000880)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000005c0)=0xfffffe62) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000540)=0x12b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$nfc_llcp(r9, &(0x7f00000043c0)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x7, 0x1, "25d08a89aae8837f726687326421747920ae1968e20cd373699fd8daea2d68bf7ee425535bff91167faa35b33054f80bdbebfd95e453d17a63c514ad40b02b", 0x16}, 0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000640)=ANY=[]}], 0x1, 0x4800) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="b61f5fbc87c3def18b1cf2c7ce72463e5865356ea72551a57a3daf837c627eab11c7d4b7f94f9496b55c47c2393bd1309cb77d9156e019db0c95a5035697ad0a198bb834cd2a33b641c4ed7b1c3bada740c5c4e29ec34ea3ed79ee2f2635407dd6c5da3b712f3f69710ac2bd4333e053e3e52a8288e1a89033773981693897d4cfbf1fbc8bb84c7860c0c70f14668ad299e5fe97065644e7"], 0x1) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000082c3964cc69610650a9e4c8700e2701bb60689080045000028000000010000000e00bac5ffcf165bf8dc00010000805c2a91e414699d955c"], &(0x7f0000ea3000)) 2018/04/05 22:48:43 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0x150) 2018/04/05 22:48:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000723ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) connect$inet(r0, &(0x7f0000d37ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) read(r0, &(0x7f0000001080)=""/161, 0xa1) shutdown(r0, 0x1) 2018/04/05 22:48:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000001000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000100)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/05 22:48:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b82a86195399d6cf0acff2cb28e917e9ff23005bdbeb98dba252649ea76e5761792d7b2eea9353eb393486161325aff8b8a4746866ef0e4769ad49d903436c60d25aa0886d1bd9a7ecb8d5b075464b61eb18844f04b319e14525aaaddf48621c18b08868c6216a4d65ac45d29f5a0e4aeaa1837438a72b611a5bceb6d68d2b6fb09aca54891dd3867957f85021c429663ffa485065ddfabecfe676543637f819b965417f740a510c964ac7ab443b68663599591218fe908757d78f5372ab972e5d", 0xc1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/05 22:48:44 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0xfb) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140), &(0x7f0000000040)=0x4) 2018/04/05 22:48:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00'}) r2 = socket$packet(0x11, 0x200000002, 0x300) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e23}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000004b669462dcbccf65a4193681f6c20000000000000000000000000010fcacc1acdbfe05ecf377b5a32fdefca37cd7e586a4913cf83f3bc81f912ab02c5edb16ebc24fbbd375700e1841afcdd884a6f3c7251b7f213a12b741f6e4f8441caac3558f35347e4c5fd6dac6ad08c27e3131c3d08cedc18711bbe983f42f1b335e5e8e442ffb1d45b14c0b2b56685fc227fe8f"], &(0x7f00000002c0)=0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280), 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000640)=0x4) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x20, 0x9, 0x3, 0x7a58}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) r6 = socket$packet(0x11, 0x3, 0x300) listen(r6, 0xca) sendmsg(r5, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) close(r2) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_int(r8, 0x21, 0x0, &(0x7f0000000340)=0x8, 0x7f) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000840), &(0x7f0000000600)=0x4) accept(r7, &(0x7f0000000880)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000005c0)=0xfffffe62) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000540)=0x12b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$nfc_llcp(r9, &(0x7f00000043c0)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x7, 0x1, "25d08a89aae8837f726687326421747920ae1968e20cd373699fd8daea2d68bf7ee425535bff91167faa35b33054f80bdbebfd95e453d17a63c514ad40b02b", 0x16}, 0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000640)=ANY=[]}], 0x1, 0x4800) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="b61f5fbc87c3def18b1cf2c7ce72463e5865356ea72551a57a3daf837c627eab11c7d4b7f94f9496b55c47c2393bd1309cb77d9156e019db0c95a5035697ad0a198bb834cd2a33b641c4ed7b1c3bada740c5c4e29ec34ea3ed79ee2f2635407dd6c5da3b712f3f69710ac2bd4333e053e3e52a8288e1a89033773981693897d4cfbf1fbc8bb84c7860c0c70f14668ad299e5fe97065644e7"], 0x1) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000082c3964cc69610650a9e4c8700e2701bb60689080045000028000000010000000e00bac5ffcf165bf8dc00010000805c2a91e414699d955c"], &(0x7f0000ea3000)) [ 236.473107] XFS (loop6): Invalid superblock magic number 2018/04/05 22:48:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000176000)="00640001000445") getdents64(r0, &(0x7f0000000000)=""/40, 0x28) getdents(r0, &(0x7f0000001000)=""/4096, 0x1000) 2018/04/05 22:48:44 executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f0000000080)='./file1\x00') r1 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x400000, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r2, 0x8001) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x1, &(0x7f0000001780)=[{&(0x7f0000001540)="d384766f408b1b22224e42085553aa89ded735711bd422631cf7cd4c422c3bc1164ab91767aac3567b5ae92984d8f48ef6e7892e5c38eda6d374f03a22a865bbbceadab6fc959654a7fc35f93804e96a225a2c8d13aec915172690e3f75c516e9162648ca5269a1080745704cc3aab77f25213e3d44e52885a9d48f68c0dc3", 0x7f, 0x1}], 0x80000, &(0x7f0000001bc0)) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) umount2(&(0x7f0000001440)='./file0\x00', 0x3) write(r3, &(0x7f0000000300)="d88a8d38144e5013d473c0ac2ca61ff3b749a4f5c7e6e9c2ce586e5cfca5d60ffc9a4df71856925b300ab39b1dd5923858", 0x31) linkat(r1, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x7527fb3200000000) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000001940)="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", 0x142}], 0x1, 0x0) syncfs(r2) getdents64(r0, &(0x7f0000001840)=""/250, 0xfa) open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000001480)='./file1\x00', 0x4, 0x1, &(0x7f00000014c0)=[{&(0x7f00000015c0)="87a188c0aeaeb9ff3376dd2a352ccae793b500e434b798f2abe461b0e2459bf114fa523ad9cf669081dbfd4f983ca9c2a95c6faf6b5a6ab228969a8a15063169462474c31af7abac31d08f736eaf4c16b7ac49708e3088d0486cc5dd1914c82328eefb4525215c8cf6056f9b6715629d524c73d3773e046a3363fe372ba13be11c57c0b684e6f8b914fbb8502977a5c3352386636343c67b6ae65ea3c7f704aa0cbd5731e411372bb22b70df054d4d549e98d38469b8fd9fb0c41af0b79207210512d718f29a2727715aac84bf1f368f233025a4fb77053a41d498ffab879bec5bbf5e09f1", 0xe5, 0x100}], 0x4000, &(0x7f00000016c0)={[{@grpquota='grpquota', 0x2c}, {@integrity='integrity', 0x2c}, {@usrquota='usrquota', 0x2c}, {@nointegrity='nointegrity', 0x2c}, {@umask={'umask', 0x3d, [0x35, 0x38, 0x36, 0x7a, 0x78]}, 0x2c}, {@nointegrity='nointegrity', 0x2c}]}) syncfs(0xffffffffffffffff) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0xf00}], 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000180), 0x12000) lseek(r1, 0x43, 0x6) ftruncate(r2, 0x7f) 2018/04/05 22:48:44 executing program 6: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700)={'nouuid,', {[{@logbufs={'logbufs', 0x3d, [0x38, 0x0]}, 0x2c}]}}) 2018/04/05 22:48:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b82a86195399d6cf0acff2cb28e917e9ff23005bdbeb98dba252649ea76e5761792d7b2eea9353eb393486161325aff8b8a4746866ef0e4769ad49d903436c60d25aa0886d1bd9a7ecb8d5b075464b61eb18844f04b319e14525aaaddf48621c18b08868c6216a4d65ac45d29f5a0e4aeaa1837438a72b611a5bceb6d68d2b6fb09aca54891dd3867957f85021c429663ffa485065ddfabecfe676543637f819b965417f740a510c964ac7ab443b68663599591218fe908757d78f5372ab972e5d", 0xc1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/05 22:48:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00'}) r2 = socket$packet(0x11, 0x200000002, 0x300) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e23}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000004b669462dcbccf65a4193681f6c20000000000000000000000000010fcacc1acdbfe05ecf377b5a32fdefca37cd7e586a4913cf83f3bc81f912ab02c5edb16ebc24fbbd375700e1841afcdd884a6f3c7251b7f213a12b741f6e4f8441caac3558f35347e4c5fd6dac6ad08c27e3131c3d08cedc18711bbe983f42f1b335e5e8e442ffb1d45b14c0b2b56685fc227fe8f"], &(0x7f00000002c0)=0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280), 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000640)=0x4) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x20, 0x9, 0x3, 0x7a58}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) r6 = socket$packet(0x11, 0x3, 0x300) listen(r6, 0xca) sendmsg(r5, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) close(r2) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_int(r8, 0x21, 0x0, &(0x7f0000000340)=0x8, 0x7f) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000840), &(0x7f0000000600)=0x4) accept(r7, &(0x7f0000000880)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000005c0)=0xfffffe62) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000540)=0x12b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$nfc_llcp(r9, &(0x7f00000043c0)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x7, 0x1, "25d08a89aae8837f726687326421747920ae1968e20cd373699fd8daea2d68bf7ee425535bff91167faa35b33054f80bdbebfd95e453d17a63c514ad40b02b", 0x16}, 0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000640)=ANY=[]}], 0x1, 0x4800) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="b61f5fbc87c3def18b1cf2c7ce72463e5865356ea72551a57a3daf837c627eab11c7d4b7f94f9496b55c47c2393bd1309cb77d9156e019db0c95a5035697ad0a198bb834cd2a33b641c4ed7b1c3bada740c5c4e29ec34ea3ed79ee2f2635407dd6c5da3b712f3f69710ac2bd4333e053e3e52a8288e1a89033773981693897d4cfbf1fbc8bb84c7860c0c70f14668ad299e5fe97065644e7"], 0x1) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000082c3964cc69610650a9e4c8700e2701bb60689080045000028000000010000000e00bac5ffcf165bf8dc00010000805c2a91e414699d955c"], &(0x7f0000ea3000)) 2018/04/05 22:48:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0x4}) 2018/04/05 22:48:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0x0, 0x5770000}]}) [ 236.704343] XFS (loop6): Invalid superblock magic number 2018/04/05 22:48:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b82a86195399d6cf0acff2cb28e917e9ff23005bdbeb98dba252649ea76e5761792d7b2eea9353eb393486161325aff8b8a4746866ef0e4769ad49d903436c60d25aa0886d1bd9a7ecb8d5b075464b61eb18844f04b319e14525aaaddf48621c18b08868c6216a4d65ac45d29f5a0e4aeaa1837438a72b611a5bceb6d68d2b6fb09aca54891dd3867957f85021c429663ffa485065ddfabecfe676543637f819b965417f740a510c964ac7ab443b68663599591218fe908757d78f5372ab972e5d", 0xc1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) [ 237.449789] jfs: Unrecognized mount option "umask=586zx" or missing value 2018/04/05 22:48:45 executing program 6: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700)={'nouuid,', {[{@logbufs={'logbufs', 0x3d, [0x38, 0x0]}, 0x2c}]}}) 2018/04/05 22:48:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ff40dfe70009149b00f99b", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x8, &(0x7f00000003c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000fd0ed4)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f00006f8f8b)=""/117, 0x70}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f0000de6000)=""/4096, 0x1000}, {&(0x7f0000000280)=""/85, 0x55}], 0x5, &(0x7f0000fd0000)=""/100, 0x64}}], 0x7fffffffffffc19, 0x0, &(0x7f00000000c0)={0x0, r1+30000000}) 2018/04/05 22:48:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa8) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000140)) shutdown(r0, 0x1) 2018/04/05 22:48:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000000040)=""/53, 0x35) 2018/04/05 22:48:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) 2018/04/05 22:48:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b82a86195399d6cf0acff2cb28e917e9ff23005bdbeb98dba252649ea76e5761792d7b2eea9353eb393486161325aff8b8a4746866ef0e4769ad49d903436c60d25aa0886d1bd9a7ecb8d5b075464b61eb18844f04b319e14525aaaddf48621c18b08868c6216a4d65ac45d29f5a0e4aeaa1837438a72b611a5bceb6d68d2b6fb09aca54891dd3867957f85021c429663ffa485065ddfabecfe676543637f819b965417f740a510c964ac7ab443b68663599591218fe908757d78f5372ab972e5d", 0xc1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/05 22:48:45 executing program 7: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x28, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x14, 0x3, [@typed={0x10, 0x0, @u64}]}]}, 0x28}, 0x1}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)) gettid() ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0xffff) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x8, 0x349c40) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000340)=0x3, 0x3, 0x0) getsockname(r3, &(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x2, 0x400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x60000006}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000140)="38f20ff8f1127c3c8f3481d4522ca911602bf1e2c5d77343160e94b4f4bda5c95022b224d05cd9aa2830dbd25521531e4581de368757b685d6cb36dfeddca9bc51a4662d4e88a9da83e9aaee2ca538cca6415bd066901dc4219655ce00f9aa1c38b1716ce0107208f78c8ea0d412ab560608fb94114f72f65eec26185c14216bcc6e54d084aaf9f8e74e317a1b45c9d6ce7cc8de2fd106b634053deff225508f5c3f1f5c6862b68021889b052cb8b4ea2bfcc58f223b2c19761b83ab08ea4deb86f160b2d8c92f9193c8caa62afefc83942fd6ed2aff84542178191c69d0de10c2d23da757982a1cd3d050b78cc0ea"}, 0x10) keyctl$revoke(0x3, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00004b4000)=[{}], 0x15555701, 0x0) close(r4) epoll_create1(0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x6) 2018/04/05 22:48:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000001000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000100)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) [ 237.693641] jfs: Unrecognized mount option "umask=586zx" or missing value 2018/04/05 22:48:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) write(r0, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000000f6070000ff000000078a001f05080029007500", 0x27) [ 237.805169] netlink: 'syz-executor7': attribute type 3 has an invalid length. [ 237.806465] XFS (loop6): Invalid superblock magic number 2018/04/05 22:48:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) 2018/04/05 22:48:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000000040)=""/53, 0x35) 2018/04/05 22:48:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 237.883993] netlink: 'syz-executor7': attribute type 3 has an invalid length. 2018/04/05 22:48:45 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="3665a19b41e97ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000b3d000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="0e", 0x1}, {&(0x7f0000000280)="182a42ff021019014cb543ad6268e8dd67583821a458902488b342834865a7e09065d2a2ac92b76c3f08a85cdbaef6d9e56a4d78c38dd2ef254373c69c3c8cf8713badace227d8a6ebe63a2cfb659ff957a50d16c27e6b800c28e4", 0x5b}, {&(0x7f0000000340)="bb6f69e82dc0f531b848d0ba94cdebfed5c9b4d9fa0e6ca6b17c7156c08b1fcc49dbca21d3989bbb7a516ba6e26b851ab1eb4c74d566816340717a080fa3407ce1e8664351a49899d88ae4be6cd5489dbb3c8fad17f5aaaa5d8c757af3", 0x5d}, {&(0x7f00000004c0)}], 0x4, &(0x7f00006b0000)}, 0x0) 2018/04/05 22:48:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') exit(0x0) pread64(r0, &(0x7f00000000c0)=""/100, 0x412, 0x800000000000000) 2018/04/05 22:48:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/05 22:48:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000000040)=""/53, 0x35) 2018/04/05 22:48:46 executing program 7: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x28, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x14, 0x3, [@typed={0x10, 0x0, @u64}]}]}, 0x28}, 0x1}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)) gettid() ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0xffff) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x8, 0x349c40) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000340)=0x3, 0x3, 0x0) getsockname(r3, &(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x2, 0x400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x60000006}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000140)="38f20ff8f1127c3c8f3481d4522ca911602bf1e2c5d77343160e94b4f4bda5c95022b224d05cd9aa2830dbd25521531e4581de368757b685d6cb36dfeddca9bc51a4662d4e88a9da83e9aaee2ca538cca6415bd066901dc4219655ce00f9aa1c38b1716ce0107208f78c8ea0d412ab560608fb94114f72f65eec26185c14216bcc6e54d084aaf9f8e74e317a1b45c9d6ce7cc8de2fd106b634053deff225508f5c3f1f5c6862b68021889b052cb8b4ea2bfcc58f223b2c19761b83ab08ea4deb86f160b2d8c92f9193c8caa62afefc83942fd6ed2aff84542178191c69d0de10c2d23da757982a1cd3d050b78cc0ea"}, 0x10) keyctl$revoke(0x3, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00004b4000)=[{}], 0x15555701, 0x0) close(r4) epoll_create1(0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x6) 2018/04/05 22:48:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept(r0, 0x0, &(0x7f0000000580)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="7f000001553f57a10000000095ca62772b3210dbb5f5b1040000007f0000017f000001e0000002e0000001"], 0x1) r8 = accept4(r6, &(0x7f0000006bc0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000006c40)=0x80, 0x80000) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000013c0)={@empty, 0x0}, &(0x7f0000001400)=0x14) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000540)=0x6, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={r5, 0x8c, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x9c53, @remote={0xfe, 0x80, [], 0xbb}, 0xffff}, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x10001}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x7}, @in6={0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}, 0x1210ea4e}]}, &(0x7f0000000480)=0x10) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001440)={@mcast2={0xff, 0x2, [], 0x1}, 0x24, r10}) listen(0xffffffffffffffff, 0x6) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001300090665000000000000007f0080400300000046000107000000141900040004870000000003f500000000000000000000000000", 0x39}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r12 = accept(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000140)) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0xa}, &(0x7f0000000140)=0x8) 2018/04/05 22:48:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) 2018/04/05 22:48:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef0100010000006e5fbe5a000000000000000001000000000000000b000000800000002c", 0x5d, 0x400}], 0x0, &(0x7f0000012e00)) 2018/04/05 22:48:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000005760000000000000183f00711054000000000015000000000000009500000000000000"], &(0x7f00000003c0)="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", 0x7, 0xfb, &(0x7f0000000f00)=""/251}, 0x48) 2018/04/05 22:48:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/05 22:48:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x18, 0x2ff, 0x0, 0x0, {0xa, 0x0, 0x4b9}, [@typed={0x7, 0x0, @u32}, @typed={0xc, 0x2, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/04/05 22:48:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="d179f2508fb13583605d0008a230e7a6", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00001b0000)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000300)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/05 22:48:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) [ 239.104734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 239.120870] EXT4-fs (loop6): bad geometry: block count 2048 exceeds size of device (2 blocks) [ 239.135403] netlink: 'syz-executor7': attribute type 3 has an invalid length. 2018/04/05 22:48:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000000040)=""/53, 0x35) 2018/04/05 22:48:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/05 22:48:46 executing program 2: r0 = getpid() kcmp(r0, r0, 0x4858f6e18c461d56, 0xffffffffffffffff, 0xffffffffffffffff) [ 239.185844] EXT4-fs (loop6): bad geometry: block count 2048 exceeds size of device (2 blocks) 2018/04/05 22:48:46 executing program 7: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x28, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x14, 0x3, [@typed={0x10, 0x0, @u64}]}]}, 0x28}, 0x1}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)) gettid() ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0xffff) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x8, 0x349c40) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000340)=0x3, 0x3, 0x0) getsockname(r3, &(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x2, 0x400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x60000006}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000140)="38f20ff8f1127c3c8f3481d4522ca911602bf1e2c5d77343160e94b4f4bda5c95022b224d05cd9aa2830dbd25521531e4581de368757b685d6cb36dfeddca9bc51a4662d4e88a9da83e9aaee2ca538cca6415bd066901dc4219655ce00f9aa1c38b1716ce0107208f78c8ea0d412ab560608fb94114f72f65eec26185c14216bcc6e54d084aaf9f8e74e317a1b45c9d6ce7cc8de2fd106b634053deff225508f5c3f1f5c6862b68021889b052cb8b4ea2bfcc58f223b2c19761b83ab08ea4deb86f160b2d8c92f9193c8caa62afefc83942fd6ed2aff84542178191c69d0de10c2d23da757982a1cd3d050b78cc0ea"}, 0x10) keyctl$revoke(0x3, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00004b4000)=[{}], 0x15555701, 0x0) close(r4) epoll_create1(0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x6) [ 239.248565] netlink: 'syz-executor3': attribute type 4 has an invalid length. 2018/04/05 22:48:46 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) 2018/04/05 22:48:46 executing program 2: prctl$setname(0xf, &(0x7f0000000040)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000020effb)='/dev/dsp\x00', 0x0, 0x0) 2018/04/05 22:48:46 executing program 6: unshare(0x40600) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b81fef)='/dev/vga_arbiter\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000610000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000924000)) [ 239.338507] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 239.374516] netlink: 'syz-executor7': attribute type 3 has an invalid length. 2018/04/05 22:48:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/05 22:48:47 executing program 3: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000005c0)=0x8, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000440)=0x100000001, 0x3b78) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x5, 0x7fff}, 0x14) sendto$inet(r0, &(0x7f0000000240)="82", 0x1, 0x0, &(0x7f0000000400)={0x2}, 0x10) 2018/04/05 22:48:47 executing program 6: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x483, &(0x7f0000000040)=""/24, &(0x7f0000000000)=0x21d) 2018/04/05 22:48:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x321, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/05 22:48:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000180)={&(0x7f0000000080)}, 0x9, &(0x7f0000000380)={&(0x7f00000001c0)}}, 0x18) 2018/04/05 22:48:47 executing program 7: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x28, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x14, 0x3, [@typed={0x10, 0x0, @u64}]}]}, 0x28}, 0x1}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)) gettid() ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0xffff) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x8, 0x349c40) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000340)=0x3, 0x3, 0x0) getsockname(r3, &(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x2, 0x400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x60000006}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000140)="38f20ff8f1127c3c8f3481d4522ca911602bf1e2c5d77343160e94b4f4bda5c95022b224d05cd9aa2830dbd25521531e4581de368757b685d6cb36dfeddca9bc51a4662d4e88a9da83e9aaee2ca538cca6415bd066901dc4219655ce00f9aa1c38b1716ce0107208f78c8ea0d412ab560608fb94114f72f65eec26185c14216bcc6e54d084aaf9f8e74e317a1b45c9d6ce7cc8de2fd106b634053deff225508f5c3f1f5c6862b68021889b052cb8b4ea2bfcc58f223b2c19761b83ab08ea4deb86f160b2d8c92f9193c8caa62afefc83942fd6ed2aff84542178191c69d0de10c2d23da757982a1cd3d050b78cc0ea"}, 0x10) keyctl$revoke(0x3, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00004b4000)=[{}], 0x15555701, 0x0) close(r4) epoll_create1(0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x6) 2018/04/05 22:48:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Threaded\x00', 0x1) 2018/04/05 22:48:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000396000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000d6afa0)=[{{&(0x7f00000bb000)=@ipx, 0x10, &(0x7f0000637fe8), 0x0, &(0x7f0000b1c000)=""/248, 0xf8}}], 0x1, 0x0, &(0x7f0000c08ff8)) read(r0, &(0x7f0000000180)=""/93, 0x5d) shutdown(r0, 0x0) [ 239.766105] netlink: 'syz-executor7': attribute type 3 has an invalid length. 2018/04/05 22:48:47 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x2ad9ed40, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0xb, 0x9, [@empty, @multicast2=0xe0000002]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f77a48", 0x0, "9a5cc6"}}}}}}, &(0x7f0000000180)) 2018/04/05 22:48:47 executing program 6: r0 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000005c7e89d762d5aa51b5ecb6559949a74a9"]}) 2018/04/05 22:48:47 executing program 2: socket(0x26, 0x80005, 0x3) 2018/04/05 22:48:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)='$', 0x1}], 0x1) shutdown(r1, 0x1) r2 = accept4(r0, &(0x7f0000c71ff0)=ANY=[], &(0x7f0000f5effc), 0x0) sendto$inet(r2, &(0x7f0000000280)='"', 0x1, 0x0, 0x0, 0x0) 2018/04/05 22:48:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 2018/04/05 22:48:47 executing program 7: open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)="d8", 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb3200000000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4009, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 2018/04/05 22:48:47 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x0) 2018/04/05 22:48:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000200), 0x28020, &(0x7f00000000c0)) 2018/04/05 22:48:48 executing program 4: creat(&(0x7f0000000ff8)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 22:48:48 executing program 6: unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) 2018/04/05 22:48:48 executing program 1: syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x0, 0x2002) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f00000012c0)=ANY=[], 0xffffff4b) read(0xffffffffffffffff, &(0x7f0000000200)=""/170, 0xaa) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2018/04/05 22:48:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:48 executing program 7: open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)="d8", 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb3200000000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4009, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 2018/04/05 22:48:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000180)={&(0x7f0000000080)}, 0x9, &(0x7f0000000380)={&(0x7f00000001c0)}}, 0x18) 2018/04/05 22:48:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x62}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x1}, 0x48) 2018/04/05 22:48:48 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 2018/04/05 22:48:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000"], 0x14}}], 0x2, 0x0) 2018/04/05 22:48:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@mpls_getnetconf={0x14, 0x52, 0xd03, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000200)=""/36, 0x24}, 0x0) 2018/04/05 22:48:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cdc000)=[{&(0x7f00000000c0)="390000001100094701bb61e119f7cbee070000000200000045eeffff08009b0019001a000fe1ffff020000000000000004e9000a06002d0005", 0x39}], 0x1) 2018/04/05 22:48:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:49 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="4c0000001200ff09fffefd956fa2830007a6008000000000000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/05 22:48:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/05 22:48:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001700)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a6621f51a480e2f3aac78a8db2c0be10f25d1fea68bbb27cf59ce6768143c7da0a5277c17be7e03ff2cd97a72d0351a82cb32b931716cad42bf9e3ec64b5fb82d5ab6bbd2d014549e66a84f9c795681f0a1df8b9edf3ce14950237ec78ece828761d8bc9245639704915d7d5d5625e9cd9707fd187d962a37d82094a688f609709697282397e835b7b1e416f488d1e93e9dd87c96a1fdfc37bdb13612dd5aa126c16417a8f366042350e9485d00b192449c56657ad3ea028ff1eb384742822414bbe5218eb51fe1b23ce8ff59358aec9153efa611c57ea26daf7533d6c3a4") poll(&(0x7f0000000000)=[{r0}], 0x1, 0xbd) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) 2018/04/05 22:48:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:49 executing program 7: open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)="d8", 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb3200000000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4009, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 2018/04/05 22:48:49 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) setfsuid(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x2}) clock_settime(0x0, &(0x7f0000001440)={0x77359400}) 2018/04/05 22:48:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000180)={&(0x7f0000000080)}, 0x9, &(0x7f0000000380)={&(0x7f00000001c0)}}, 0x18) 2018/04/05 22:48:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/05 22:48:49 executing program 6: socket$inet6(0xa, 0x3, 0x10000000033) r0 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000002, &(0x7f0000000980)=0x79, 0xffffffffffffff58) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x5, 0x2, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r3 = socket(0x2, 0x805, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000f80), &(0x7f00000009c0)=0x68) bind$inet(r3, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r3, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={r2, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1b, 0x0, 0x0, 'bcsf0\x00', 'teql0\x00', 'ip_vti0\x00', 'erspan0\x00', @empty, [], @random="c8992de4105a", [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}]}, 0x1c8) socket$pppoe(0x18, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x0, 0x2, 'lc\x00', 0x0, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000900), &(0x7f0000000940)=0x40) shutdown(r0, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r0}) socket$vsock_dgram(0x28, 0x2, 0x0) [ 242.067663] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 242.075162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/05 22:48:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)={0x30, 0x25, 0xaff, 0x0, 0x0, {}, [@typed={0x8, 0x93, @pid}, @nested={0x14, 0x0, [@typed={0x10, 0x0, @str='vboxnet1em0\x00'}]}]}, 0x30}, 0x1}, 0x0) 2018/04/05 22:48:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000647000)='/dev/ptmx\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00001c2000)=0x19) write$tun(r1, &(0x7f0000158000), 0x40) [ 242.196854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 242.213373] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:0 lc [ 242.225438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/05 22:48:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x42a42f, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000140)) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) 2018/04/05 22:48:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xfffffd74}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/04/05 22:48:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)="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") [ 242.257174] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:0 lc 2018/04/05 22:48:49 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x24, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0x1a}]}, 0x24}, 0x1}, 0x0) 2018/04/05 22:48:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) 2018/04/05 22:48:50 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000001a0003000700fd556fa283bc0aeee6d879d37d05271d85940800040001000000", 0x24}], 0x1}, 0x0) 2018/04/05 22:48:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)={'nouuid,', {[{@sunit={'sunit', 0x3d, [0x35]}, 0x2c}, {@swidth={'swidth', 0x3d, [0x35]}, 0x2c}]}}) 2018/04/05 22:48:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) 2018/04/05 22:48:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000000c0)={0x0, 0x0, 0x5f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000140)={0x4dec, 0x0, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000003c0)="db5943f2260f0130b9800000c00f3235000800000f30b9800000c00f3235008000000f3066baf80cb8ee2bfa86ef66bafc0c66b8340b66ef0f00dac744240000000000c7442402f0000000c7442406000000000f011c2466b829018ee8660f3881a17db7000066bad004ec", 0x6b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 242.554939] XFS (loop4): Invalid superblock magic number [ 242.598433] XFS (loop4): Invalid superblock magic number 2033/05/18 03:33:20 executing program 7: open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)="d8", 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb3200000000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4009, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 2033/05/18 03:33:20 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)={'nouuid,', {[{@sunit={'sunit', 0x3d, [0x35]}, 0x2c}, {@swidth={'swidth', 0x3d, [0x35]}, 0x2c}]}}) 2033/05/18 03:33:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) 2033/05/18 03:33:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x4, 0x4, 0x400000, 0x0, r0}, 0x2c) 2033/05/18 03:33:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000180)={&(0x7f0000000080)}, 0x9, &(0x7f0000000380)={&(0x7f00000001c0)}}, 0x18) 2033/05/18 03:33:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000be7000), 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2033/05/18 03:33:20 executing program 1: r0 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="1b", 0x1, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 2033/05/18 03:33:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x342) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 243.148735] XFS (loop4): Invalid superblock magic number 2033/05/18 03:33:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xfffffd74}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2033/05/18 03:33:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x5, 0x4) connect$inet6(r0, &(0x7f0000006fe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2033/05/18 03:33:21 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) capset(&(0x7f0000f50000)={0x20080522}, &(0x7f0000bb7fe8)) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80000001}, 0xe) 2033/05/18 03:33:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2b) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@multicast2=0xe0000002, 0x0, 0xff}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) 2033/05/18 03:33:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) 2033/05/18 03:33:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)={'nouuid,', {[{@sunit={'sunit', 0x3d, [0x35]}, 0x2c}, {@swidth={'swidth', 0x3d, [0x35]}, 0x2c}]}}) 2033/05/18 03:33:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a060000ec04a200000543dfd87c5800004824ca943264008900050000000000000000048302000000ea000004000003d46b05a38100000010000100070c09040000000000000005", 0x58}], 0x1) 2033/05/18 03:33:21 executing program 7: syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2033/05/18 03:33:21 executing program 1: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r0, 0x0, &(0x7f0000000000), 0x0) 2033/05/18 03:33:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3c, &(0x7f0000000000)=""/52, &(0x7f0000000040)=0x34) 2033/05/18 03:33:21 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100), 0x4) 2033/05/18 03:33:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@check_relaxed='check=relaxed', 0x2c}, {@norock='norock', 0x2c}]}) 2033/05/18 03:33:21 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="4848a03720c2547da4d181da9365cee0dddb80de6b0a704b2e2b9d7494296e9f93b556854b1e6ef40aa252cc54e3566aede6a53a012578cc1564fb4d60f80dd3748bf856f284de4783f839f7e1844fec232e12c633e310d5bce2a318f79e31b3", 0x60, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r4) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r5, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r5, &(0x7f0000000300)="791f7dfde08186d67dba3f649a7ba85e", 0x10) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10301) recvmsg(r5, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) dup2(r0, r2) [ 244.313804] XFS (loop4): Invalid superblock magic number 2033/05/18 03:33:21 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x34, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2033/05/18 03:33:21 executing program 2: r0 = socket(0xa, 0x802, 0x0) r1 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068d5351d650000cefa2d83344632af0600000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(r1, 0x100000008936, &(0x7f0000000000)) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000100)="10ba35c1f0af34cb422c18000a037811f9a27a59", 0x14) 2033/05/18 03:33:21 executing program 1: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r0, 0x0, &(0x7f0000000000), 0x0) [ 244.463286] ISOFS: Unable to identify CD-ROM format. [ 244.581705] ISOFS: Unable to identify CD-ROM format. 2033/05/18 03:33:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xfffffd74}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2033/05/18 03:33:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)={'nouuid,', {[{@sunit={'sunit', 0x3d, [0x35]}, 0x2c}, {@swidth={'swidth', 0x3d, [0x35]}, 0x2c}]}}) 2033/05/18 03:33:22 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000100)="84", &(0x7f00000001c0)=""/10}, 0x18) 2033/05/18 03:33:22 executing program 6: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x6037866757ac62f2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) 2033/05/18 03:33:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000067cff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x34, 0x0, &(0x7f00001e9000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0x0, 0x0, &(0x7f00002f6000)}) 2033/05/18 03:33:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@check_relaxed='check=relaxed', 0x2c}, {@norock='norock', 0x2c}]}) 2033/05/18 03:33:22 executing program 1: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r0, 0x0, &(0x7f0000000000), 0x0) 2033/05/18 03:33:22 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="4848a03720c2547da4d181da9365cee0dddb80de6b0a704b2e2b9d7494296e9f93b556854b1e6ef40aa252cc54e3566aede6a53a012578cc1564fb4d60f80dd3748bf856f284de4783f839f7e1844fec232e12c633e310d5bce2a318f79e31b3", 0x60, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r4) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r5, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r5, &(0x7f0000000300)="791f7dfde08186d67dba3f649a7ba85e", 0x10) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10301) recvmsg(r5, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) dup2(r0, r2) [ 245.074607] binder: 17618:17625 transaction failed 29201/-22, size 0--1 line 2963 2033/05/18 03:33:22 executing program 7: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 2033/05/18 03:33:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x400080000028, 0xaff, 0x0, 0x0, {0x1}, [@typed={0x8, 0x0, @u32}]}, 0x1c}, 0x1}, 0x0) [ 245.126992] ISOFS: Unable to identify CD-ROM format. [ 245.133651] binder: BINDER_SET_CONTEXT_MGR already set [ 245.151076] binder: 17618:17635 ioctl 40046207 0 returned -16 2033/05/18 03:33:22 executing program 1: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r0, 0x0, &(0x7f0000000000), 0x0) [ 245.174084] binder_alloc: 17618: binder_alloc_buf, no vma [ 245.179847] binder: 17618:17635 transaction failed 29189/-3, size 0--1 line 2963 [ 245.192129] XFS (loop4): Invalid superblock magic number 2033/05/18 03:33:22 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="4848a03720c2547da4d181da9365cee0dddb80de6b0a704b2e2b9d7494296e9f93b556854b1e6ef40aa252cc54e3566aede6a53a012578cc1564fb4d60f80dd3748bf856f284de4783f839f7e1844fec232e12c633e310d5bce2a318f79e31b3", 0x60, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r4) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r5, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r5, &(0x7f0000000300)="791f7dfde08186d67dba3f649a7ba85e", 0x10) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10301) recvmsg(r5, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) dup2(r0, r2) 2033/05/18 03:33:22 executing program 4: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2033/05/18 03:33:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x22d532ec3e7890d7) 2033/05/18 03:33:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@check_relaxed='check=relaxed', 0x2c}, {@norock='norock', 0x2c}]}) 2033/05/18 03:33:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) [ 245.338432] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.344086] binder: undelivered TRANSACTION_ERROR: 29189 [ 245.454192] ISOFS: Unable to identify CD-ROM format. 2033/05/18 03:33:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xfffffd74}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2033/05/18 03:33:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x9, 0x8000) write(r0, &(0x7f0000000800)="98c369f6bd06a253d90f12053b3c60f53d0ad1e603fcc4dfc4fc430ee6fdf263f6898afab3ba792e4e330cc15f8336e302d6b910a5c1ca1e440e311c1163a73c871016c4441d52b56ce1625998742e3c5fc4b17a8ce44187eb754285d74785ccc5e5551f3442e1c4623015d8934277d3da79764727127f9400ba77d43c5c553458ea6ca3705a727bbc477df7670d9bd0a0a13e8744f00a3943a302255ffba3944fc3714442653f57580c5f04673f62d6adf72638a10f58b58d0eb2db40b2ab19e2db545d17cc5e947f07fefaf12c09b3c10bc85f0811c1d1efaaa4d158827bf3ac9346d7c335c76bd7514a49cd427b9a9ad9cf4dddda07ed4863c8eaeba5ec15c289b67e01db2afa9b8528f516b8ba8cc338e7401da82970215ac1fcb8ef6f5dba8cd282ea8ce7691c40e9afd72d0c79aaa499788b87141b7522038f8e362182577423e41daa05ffc6d60e80630dd2e0ca594d527e9d506b24ac6f3fb68f239e0c207ebd8d8ce47f8ffedc72aa71e2f7711b2cce6ccb1a6f76706b6b8e02117d33cc2bfa2940e4a6c3511212d0f5c4383df939307002758a49793176579a23b1f85cd50787792fd4de20e13a67c4914478b23c84789960f62724a68efd72a9008b44151c92294e19fbe41fd38f4d88b3a32728f20574aae8696ede5e7f62417b29ff3b87ce8d4cbdece093398a8ac69a3e9d6bbdcbc427c599763ef512a40b152d3d04915c2c1387318fac9c3fa72d646d1b39985588e2625083d6764faa4ac9338ec19f7459ffa8c1c3e825ebc75124693beddfc8414db86cca9c1e110e32f56390ef5bc66d04ec0395619df685e1bb5fe4e3fe38ccf3c8a72b572be072c56aa4334f0a5920f02a7a37b2aa7c168460a9de0781b9516ca97bd20dc2709cd5d981fb15e089e6f969a38231cbefc4e51354ecdcd0bcf45e28b4f46e247677314c4853bd7d4dc2b8e16babd2c9ea85d68276aad661ecc9011a4920a6b881ec91572aced271c65a5ec3273dfd39d07445847a018c3c2f12be4ed473b95b30e581e19d0fcb984c77ef672fe665456c1a32e21d68877f77d8c68f60ee06f2342d1e165db0e2ad230a1b7fd2f97aa534747bb80c5376a6a1b4e2a095e46bed4febc10f40c2795065b31d626a4f7ec8a3585e0bd5fcedcab0362bef52669540a866bbfdb8af12b11590ac240ab6146a618da8cccf32ddcd36ce5a4d50cc804c43e39ba4451662e4d962c68e4dcf216de49bff88a38b736db3829011843b336b9aeb743fed7c61f10ea1bb88e96581e4ef7c16807d1a74a1679d016f8ca611bf0210473d8877d0f97bc2f425ffc275d2314958fba595a53b1a9e2edc8ddaeb88580e24e3a3f46764eed14890192692502a64e40273569c3e3ce1cad43393a88b3be2f27850a5fcb57d13b881a0e7868951f51dbedad7403b9bc10138e0605cbce090cc2b3ff3700ff9a6ada4b041296db7c67296c89a345b47830143a478877818de7506fd217009cfefcedd85b5b8fa3ad89e643768b47ec4109b86d048aefd2ae5d4880b1084bc57fcf317d0e59f1fca6f00fa9b236ddd753c56469a48ab260e6da2d60ad4c43afa49558cdcfc68c0f3704809c07eafb76dbcc51711244670182e653317652be8c6b32a52d56c611e33ec10dd7ada5b29325b5a2752868493f3227279116c763a0e6b8a0404ed440845e3cba6216c7609c66e8a9b5057ee5645f7b3fc2ff4a0fe5c0bc8a8144085689fdd6fcdc1aa7620b65a7ac46226e903edff3e65fd89362524364a6d56655e984f21f546652c76b8aadc3c6c760f0bfc018341651297558dfe53a26ce4b32a4742b71342d516555dd8fac1f7c456faab5a481e9c649b0bfbb5a5462881a1b158ec5d62f008895ea01c8e3ea2513e10e9e0bbba3c74020101f6b477cb6d368e1a175dc7f1f19290fb951d8c5305d6d8d44de9855eaa7dd190e891bc284015eee09b8a25af2a807a66efdce9ea7147e9b8abb58088cb3ace146a8b1e2f668feceac8773a3a30042fdb1ef1a37cb86bad0985eeeac98d8c8b70badf7f64dd67f0e6209cee42acef3aac0869b8dad0853987ece18810bd84514f6b8cfcd86b71c4d3f244805788a3615380ed1d4de447ab2053131c5c49229b84c271e36429e40bd97f0380bb80712a9dc326a5d613682560a8975f7ebe3626f17b9e013c2febe13d455a7ee6fbb7d3702c2c303047d03c8256669ab6373c7a432e218bda1d57a725103e4b91f301d948dd807a79bb2a2ded3adfd6b296043fdbb3d40fdf8ad7c861defd7a9414b43d9cc2f7ec582cc9f26faae48807e462a189a242c13c952f44909ac0804ef9dfd91813e9d460a1c78d06be119123d19b8a4a55bdba6fa02a4223904a19b7f180b893250611ef78148d17cf9c00454bb4c086d711087362578b787885e885edfa6a01ad10261aac898dff53c272f916712934f55ef695d639452df834ea488e6c3bbf0b31a30efcb2e1dd02577797bcb38b2806aa3ff2ba4665de0c64f19637a54ccee01c9936ebae77fefbf27d9128f6ab39094d2aaac458716a44743d80eb343fec60053951931e422635f956aedb9bb62f7bf5d54470cd38dc60c5345b60ad5d309da9e6ee00065a94244ea3481b2a26fe7f28edd0df1ac27d0e30253bdf0cbdeab7ef4185ee95d4cae41f638c2c69423cef6564d10c56113526be265e1d39bf7a846339869390db9ed8b95de5e904db8ebe5912550252207a64210199ad2f3ba6d894600caeb01322df4a878dbaf281ae489cd17f25072fa475978ef1d7dbaf55a464650e4a3b2cd861fee49303be8b5292693866309b69298979719c7a91d71811df4867ddc0f1f0e279bdb6825d81a64a2a610a9ee99caa543c92a89cec8eaa19a927f85d6750eaccf62e7f23c31606ad5f80779ddb94979bea342a8062a2b4a2c227fb30fee05d4ccc84fa053c83ab795ddea5c357f1346ab551df513cef361d9842b98b1bed8cf07c227e7efc321fa2810d0fd20cdfda98a50923ba45c7e92425ff0139047b6a146eafe37205fe3988b92b7171cfd31a2463065f4400d96e682096aca148d9679bc0745e9a977ced9b103d56dd3ab5ebdd234b50e6c24db80e38d3cd7f2f405b593ad3979eed0bee7be773eae37612f12059df9b41f78e44a635f4fd491876da89fe9e72537965519866a1fb3e8ecbc699e24cdd73dcd79e3b67cad92ebda1283a1a9c423804db2dd5cc4ee9911fe3823bfc30ae363bf1a6ac5c19d91e2b016b475481dd5c5d7266bb221d8a50e9dfc970b57c1b7a8dc4c416d47a2d002bdbe75a0ee34b9ba99797129957fe35752cd9913715136741fb8fdc1c6cdb57a535f38ce24d0e92dc64f5e15c8bfc00f1f9faf0e1135924caca123b3bb7f8be4a0bdacc1636311a667ed1364fd0c35aaa6fbfdf52ee9a17b1f15f3ec20abe8fb4f508147b12e1fbfa3055633d640679d925392dcf1bd40bf8c81a9681fe3e5d38cfda39806c667a0dc1cce0fc09b2e841ad4f8b7f76b3a45cd7c3debc6d6180b841f71184e60c0484347ea90a0600545a4d9c98b05cbbac12f3eab5d1ec358c192da480f6c835e24e6b96f84dbccd2c4e3805493cb44a7273abb4c136d8fc99a542c3cdc28aeaa1b7ea3a427edb3ee04dd07603d54659b90cb317cb213067c57cc141c7554980da05df572d4f3aaac869546460cbab5ddc73c1a8775b0134bf27660e524eed9871e8e746b93e270ac5f3508a2f1f8ae9fa21867e9f0955e96450dbc6f11e61361c3ad07872bcb254d452e2a6c50140b694bc1a21935e4b00c13a07bb8c644cf4d69b5d6abc1d67ce1680e960be655b631eea314deea6f7f021666515b64f4e99d13e186a9ba491d14b3c12677f43a426ac42f6e6f1dffe43b763acc1bd3a62e8b8a395607c0a2ddf3154d2665b18e42b0cdef29c9e3fb6a7492dc2e85c0c0ef75329008efaf328ca6f41040ac8cb47aef830067acfcc1b3cfd6daa91401dd452387e61269c3521bc73ab97631cad5dcbe22ffb906f377b245657285974a1489ad21f5d4b7d6c1d6ef690435b231333bc5db2a31bbef82968686a918f7ffd0ee362b8a09775c5449354a3aaa10b82fd23d4638e94a2d2174635c65f97deb1fde7466d8842a0bc93a5d243194c7b6e3adbc4e1fee74cedeab37faf393cb5a84cdc5f2b542dbbeb5d8075ed1399f2a177b435d22b3a8728f8be734b7375430b73ed4083df13a97aa2f7e11b6156f6c9a972649b5054a6539d4f1c5617df7db575bf8c2b142d36c1a258ed26238b13acd47a9aaa02d42287c9bc93275ce7e26dfadf263c3456da034630816e67f0b878e11aef1b439710f93185033f1c3e8b3432c1bbbafce777d87f047eaabc3510b6d078af104140e20997a274b5a3a9e703b9625016aea59b7538d07fa3f3c009d15df4adc509121c6aa1a9872335c351eb49150ac9489c697bc556b7a06fdbcb344880560d6c62ce4dc2de3896667763956d9edabe9dd1127e11f894063d636d250ab6f3fa845364d02459219485e0a1c5ef14e0a4382c378797b21cd4149a086006294f21d4cb88bc201da8dbfc65e8df39e99c1d18e478af33bdb2c3d5a394cdf46e0fc6017f1dfe640748bde1537558ffc6ac3514c31059a772a1fefddce0be6b097ca74ca88c81c16493f5e1aff060a0ab16f715bff18955e03d7c871a4c3dd018c9578923fcd2f46896e7831d3f0612b2580886df3ba1cb7dc215a79b81305bde04b2a0eec6761b36672b6b7970739f891c4470be4a10e8c8f6471cfec1cc2ec54042b34de5521d82fd418c50cc18c8b01dad540405453511ea8c2efd8f999a42451043176885b7c2c36232b0f99f8780feb8330897ef093689cffa8325c1614fced64f0d098ea26850bc60b205b6bfddd6514502c0813f1aea65f0a8f4d4814cc684bff72561f0001cae639498164369e2f0b84991cc4f74c0527d08e8e5020d4d2bb1bab790f56983125bb45491b53bdb9709a23bb0a4364a61095dc1af33c4a7ab1c60b0fa0c2721db3bb2852d9acb34d0d40793ea023752a68ed3506714d67d41319de8e948c82cb1f2cb25c02b109ca96b339d9fc9d583f83d7ae6e978764ea95c2d32d9f1e7d3d9f42451f6efe80918e0d6af69ce095c8ab77e2645ee39331e18924514cd7cf0522efe6bbbab540275988d502c829ff0643244c8ae32b8cb614464fe37ca385006cab932c25a56fd42f7bbf0e889356d80974367c918369040f916122f927eeb2d78e186de23b1667c7cea83415e220c437c698362aa6ca2df63626c622ac73d1f2941943eea8b160f212972ebb7a7a08c8a2fc8e0979a764e53879653aa880b26cae19d5583ddccebfdc438c989896fc175c8da5f48a8355feb6d735f09c6cbcf42ab22b0c41468e0d854e748ad29fc367543128c56eaec089c5cc4b407ab134e0c76b38a51b1f39526a94c1ba6fb8c025587981a2e3ad79e28883101a61193654bb2d2e6af25ac626c6d86da4b92e6d0b6d5e3bdff6b8f56c06c5871ce61fe3e39a7dfc6f1043149de091c9bf40bf8786d7b3c3bd475ac8b98955f459419867481724bdb608ac052418006c9b48c4df7a24be98da05f099d30be310c1ff161d8f908b60653347a00fe4327fbf888c5072b3aaeb5a464f419c9623ca1c35c64989349824c13c81af6e469a7a17315536c1cb8db2f81309c5a2789af29ae7b09d33c83cf50619653aa57eb76a089345705a9efa2fea552b41bf80652db31d945cf737a7e9a3c1ef97b61abefb279f32bbb78377fa4fd8b9828d7feb5d848cad860ca0d5a56f538", 0x1000) r1 = open(&(0x7f0000000280)='./file0/file0\x00', 0x4001, 0x80000000002) ftruncate(r1, 0x80) 2033/05/18 03:33:23 executing program 1: r0 = socket(0x10, 0x400000802, 0x0) write(r0, &(0x7f0000ff6fe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0x1f) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000ff3000)=0x5, 0x4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/237, 0xed}], 0x1) 2033/05/18 03:33:23 executing program 6: prctl$seccomp(0x2b, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2033/05/18 03:33:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) 2033/05/18 03:33:23 executing program 4: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2033/05/18 03:33:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@check_relaxed='check=relaxed', 0x2c}, {@norock='norock', 0x2c}]}) 2033/05/18 03:33:23 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="4848a03720c2547da4d181da9365cee0dddb80de6b0a704b2e2b9d7494296e9f93b556854b1e6ef40aa252cc54e3566aede6a53a012578cc1564fb4d60f80dd3748bf856f284de4783f839f7e1844fec232e12c633e310d5bce2a318f79e31b3", 0x60, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r4) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r5, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r5, &(0x7f0000000300)="791f7dfde08186d67dba3f649a7ba85e", 0x10) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10301) recvmsg(r5, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) dup2(r0, r2) [ 246.015457] ISOFS: Unable to identify CD-ROM format. 2033/05/18 03:33:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) 2033/05/18 03:33:23 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) 2033/05/18 03:33:23 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="dda419ec13595eaac09ddfcdbad621421c77d94dbb1181c23713d24280363688ef97300293ae127616a39ca8da4a146abb252aa6abc8c253722f7a38", 0x3c, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket(0xa, 0x805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0xff23, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'tunl0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x372) 2033/05/18 03:33:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x8000, &(0x7f0000000080)={[{@dos1xfloppy='dos1xfloppy', 0x2c}]}) 2033/05/18 03:33:23 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/vcs\x00', 0x81ff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001080)={'vcan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000ec000)={{}, {0xe}}) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a8, 0x278, 0x138, 0x138, 0x138, 0x278, 0x6d8, 0x6d8, 0x6d8, 0x6d8, 0x6d8, 0x6, &(0x7f0000000780), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@multicast2=0xe0000002, 0x0, 0x3e, 0x3}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @remote={0xfe, 0x80, [], 0xbb}, [0xff000000, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'ip6gretap0\x00', 'sit0\x00', {}, {0xff}, 0x2c, 0x6, 0x4, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x21, 0x21, 0x800}}, @common=@eui64={0x28, 'eui64\x00'}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xffffffff, 0x4}}}, {{@ipv6={@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'erspan0\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x40, 0x7, 0x52}, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'bcsh0\x00', {0x80, 0x7, 0x8, 0x8, 0xfffffffffffffffd, 0x4, 0x6, 0x88, 0x18}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0x61}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@dev={0xfe, 0x80, [], 0x1a}, 0x3, 0x7, 0x8}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, 0x1e, 0x2, 0x400}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x808) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x3, 0x520, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x598) accept$alg(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x8, 0x400}, 'port1\x00', 0x0, 0x100020, 0x2, 0xffff, 0x1, 0x2, 0xc26, 0x0, 0x5, 0x3f}) prctl$setmm(0x23, 0x40000000005, &(0x7f0000ffc000/0x3000)=nil) r4 = msgget$private(0x0, 0x100) msgctl$IPC_RMID(r4, 0x0) 2033/05/18 03:33:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) r1 = dup2(r0, r0) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000100)=0x4) 2033/05/18 03:33:23 executing program 4: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2033/05/18 03:33:23 executing program 1: pipe(&(0x7f00000001c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000001380)={0x1, "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"}, 0xfd1, 0x0) 2033/05/18 03:33:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000a32000)={@my=0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f000072b000)={@my=0x0}) 2033/05/18 03:33:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) 2033/05/18 03:33:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="6e65742f697076365f726f7574650000001601e1160aa209e07a86df5448177d47adec466e78220008000069a43690640d0f5c4a5dce00000008f516f26c2f361eaa5fe8ec210edb437b63ccd8db59750540b977b0298f24826a3aa03977b41c422c8e76ab47d16ea287abfb72812b1037edaa1dc78a95190e0c3f9c149c4672df66e6be42676465fef03b5f0000969c5b494b2b0c10bd82a1ae3d170000000000000001da57ce748f24a236e3d76862e94d7cfd5c59f5f4ee72ea99") bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x80) 2033/05/18 03:33:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0000faa7bc796fae48f187"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:33:24 executing program 4: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2033/05/18 03:33:24 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001000ff3030ba0a0c6fc283a724a600800200000000000000000000002c002800ff01000000000000cefdd06cbedea21326a4986d27c70da654d47bb5b10f838f00944d8eb3ba0199", 0x4c}], 0x1}, 0x0) 2033/05/18 03:33:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) 2033/05/18 03:33:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000cfbff0)={0xfffffffffffffffc, 0x0, &(0x7f0000000400)}) [ 246.879739] netlink: 'syz-executor0': attribute type 40 has an invalid length. 2033/05/18 03:33:24 executing program 5: ioprio_get$pid(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x1}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x0, 0x7f, 0x3fa6, 0x0, 0x1}, 0x14) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="16f20f35ea0800b400baf80c66b8d641dd8166efbafc0cb86f13ef0f01cb3e0fc70b3e65660ff7d336643e0f01c866b9980200000f323e0fc24ffe00", 0x3c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000740)) r5 = getpgrp(0x0) r6 = getpgrp(r5) get_robust_list(r6, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000140)={&(0x7f0000000300)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r7, &(0x7f0000000380)=""/42, 0x2a) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000400)='/dev/kvm\x00', &(0x7f0000000440)='keyring\x00', &(0x7f0000000480)='self$\x00', &(0x7f00000004c0)='selinux&wlan0*+*\x00', &(0x7f0000000500)='\\\x00'], &(0x7f0000000680)=[&(0x7f0000000580)='/dev/rtc\x00', &(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)='/dev/rtc\x00', &(0x7f0000000640)=':keyring@vmnet0keyring(*'], 0x100) setsockopt$inet6_dccp_int(r2, 0x21, 0x1b, &(0x7f0000000700)=0x10001, 0x4) request_key(&(0x7f0000000780)='user\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000800)=':keyring@vmnet0keyring(*', r7) 2033/05/18 03:33:24 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000007000), 0xfffffffffffffc60, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2033/05/18 03:33:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x6}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3, 0xfffffffffffffffe}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x65b}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x403, 0x141804) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000640)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(r0, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xcb, 0x2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x10001, 0x20}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9039}, &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000200)={0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r4, r0, 0x80000) 2033/05/18 03:33:24 executing program 3: setfsgid(0x0) 2033/05/18 03:33:24 executing program 4: mlock2(&(0x7f0000b12000/0x14000)=nil, 0x14000, 0x0) r0 = add_key(&(0x7f0000001780)='asymmetric\x00', &(0x7f00000017c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001800)="26c6c8ae61c54a284f08e0c83982b9d8912f8082999470d67b4001f7d54b56dec920974803855b9d9d2e5414cd42102b6de3a1948ab2d9b532e7809d8c8d102fc848bbc018b3f6665b2fbcc963c475c7593b495c96011f1254450c2611c7a8aa2ab142377d8e852d2a363ba7e3394f147e68be35bca59c6fa1bc8ba1a00b0a763044eed74af02c26cf008b1cf64c2dba28f0feec307fe24142b69266de1c756f2740896f96eff4d6ee65063a8a61fe5d5d20a8c6588fe053d26c2a19834fc0cbd77073c6b65e9147a78d0220f63f129a3b19b5aa603e62292a753436452f210734048098fcd72111f0b1a6e9ab98e01ab346c56146a03dd96746", 0xfa, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x100) perf_event_open(&(0x7f0000000080)={0x0, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000b1e000/0x1000)=nil, 0x1000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x600000, 0x0) clock_adjtime(0x3, &(0x7f0000001500)={0x9, 0x6, 0x0, 0x7, 0x4, 0x8001, 0xffffffffffffff58, 0x3, 0xf153, 0xc5, 0x0, 0xfff, 0x23ee, 0xffffffffffffff5b, 0x1, 0x0, 0x3, 0x6, 0x80, 0x4, 0x4, 0x41, 0x8000, 0x557, 0x5}) accept4$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14, 0x0) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="4a950264658cd1107550b3710e6382cbc21eba9e8be275d2fb5a0068519eb735ba3606e51c1820347147ffc3c328c2a50d997c54ba938b2dc4d9f45d67c05983db900c98d2a0f9b6709224660a27e65d657fef60a74a08a3b2a19284faaa49a66ce49b92ec97632de462747c4b62d9bee0fca959cbb3da7c3c4d995096b65cb015711479c07a04aea699a6644946d25d06f352c15694d9d3f8a345f4c7797a3f21b52a04315685c479bb7868f74c014e18a82e24c044ac2feed3437614c3288a6f2eb5", 0xc3, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="b1f1a16dac940232476c1d0090822c2bbbb7bbc02a708c5b75fbda3843cf71d84057e07685aa0f35a8f8ff2f422a6683229042b0c799f14aed4512772b0d3646aef600c6d5d2e66f0c49bb619bc06e816cd28d5830ddfcbc540b6cbd7b68", 0x5e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xf, 0xe, &(0x7f00000003c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x7, 0x9, 0xffffffc0, 0x46e04a8d13034e28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x5, 0x1, 0xb, 0x4, 0x50, 0xfffffffffffffff1}, @generic={0x200, 0x8001, 0x0, 0x1}, @jmp={0x5, 0x401, 0xa, 0xe, 0x7, 0xffffffc6, 0xfffffffffffffffc}, @alu={0x4, 0x8, 0x0, 0xd, 0x1, 0x20}, @jmp={0x5, 0x0, 0x7, 0x9, 0x3, 0x18}], &(0x7f0000000440)='GPL\x00', 0x3b1, 0x1000, &(0x7f0000000480)=""/4096, 0x41f00}, 0x48) request_key(&(0x7f0000001900)='id_resolver\x00', &(0x7f0000001940)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001980)='*\x00', r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xffffffffffffffff, 0x7, 0x7f, 0xf193, 0x3}, &(0x7f00000016c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001700)={r2, 0x5, 0x5, [0x0, 0x4, 0x1, 0xa4ea, 0x4]}, &(0x7f0000001740)=0x12) 2033/05/18 03:33:24 executing program 0: r0 = socket$inet(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x2, &(0x7f0000001d80), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'syz_tun\x00', 'irlan0\x00', 'syzkaller1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x120, 0x120, 0x250, [@rateest={'rateest\x00', 0x48, {{'lo\x00', 'gretap0\x00', 0x14, 0x1}}}, @devgroup={'devgroup\x00', 0x18}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:event_device_t:s0\x00'}}}}]}]}, 0x2f8) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000000c0)) bind$ax25(0xffffffffffffffff, &(0x7f00000007c0)={0x3, {"e97988883ad525"}, 0x6}, 0x10) 2033/05/18 03:33:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 2033/05/18 03:33:24 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000949fe8)={0xaa}) r1 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f0000000000)="c7c13c29", 0x4, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2033/05/18 03:33:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000180)={0x4, 0x8, 0x0, 0x1, 0x0, 0x3}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000480)={0x0, 0x40, 0x2, 0x401, 0x4, [{0xffff, 0x0, 0x800}, {0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2}, {0x4, 0xb8a, 0x9, 0x0, 0x0, 0x880}, {0x3, 0x8, 0x46, 0x0, 0x0, 0x480}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x3, 0x4}, 'port1\x00', 0x84, 0x80000, 0x100000001, 0xffffffffffffff01, 0x3, 0x7fffffff, 0x200f, 0x0, 0x4, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x0, 0x800000}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file0\x00') 2033/05/18 03:33:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'ccm_base(pcbc(aes-aesni),sm3-generic)\x00'}, 0xffffffffffffff2a}}]}, 0x13c}, 0x1}, 0x0) 2033/05/18 03:33:24 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) r0 = memfd_create(&(0x7f0000000040)='proc-\x00', 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r1 = inotify_init1(0x0) getrusage(0xffffffffffffffff, &(0x7f0000000300)) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r3 = getpgrp(0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000640), 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1b0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000100)={r5, 0x8}) 2033/05/18 03:33:24 executing program 6: accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000740), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000000)) 2033/05/18 03:33:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x20, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x1, @u64}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:33:24 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000afdf)={0x28, 0x0, 0x0, @fuse_notify_inval_inode_out}, 0x28) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) recvmsg(r0, &(0x7f00002ed000)={&(0x7f0000559fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000686fa0)=[{&(0x7f0000ae3000)=""/22, 0xffffff08}], 0x1, &(0x7f0000f1b000)=""/4096, 0xffffffffffffff73}, 0x121) 2033/05/18 03:33:24 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x8100, 'yam0\x00', 'bcsf0\x00', 'ipddp0\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe0, 0x168, 0x1a0, [@time={'time\x00', 0x18}, @vlan={'vlan\x00', 0x8, {{0x7fffffe, 0x0, 0x0, 0x1}}}]}, [@common=@mark={'mark\x00', 0x10}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x2a8) 2033/05/18 03:33:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)="ce", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) [ 247.258396] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2033/05/18 03:33:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, 0x8}, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xc, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000777000), &(0x7f0000ef0f88)=""/120}, 0x18) request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000002b40)={0x73, 0x79, 0x7a}, &(0x7f0000002b80)='\x00', 0xfffffffffffffff8) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2033/05/18 03:33:24 executing program 6: accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000740), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000000)) 2033/05/18 03:33:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) ppoll(&(0x7f0000000700)=[{r0, 0x40}, {r0, 0x400}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f00000006c0)={0x3}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000001000)=0xfffffcc4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2033/05/18 03:33:24 executing program 0: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)) 2033/05/18 03:33:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x3, 0x4400) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) r0 = inotify_init1(0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2000}, {}, {r0}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}], 0x5, 0x8) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002e40)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0001, 0x0) sched_getaffinity(0x0, 0x6e84f782, &(0x7f0000002e00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00001bbf52)=""/174) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x16, 0x1, 0xa5}) close(r2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0x8) 2033/05/18 03:33:24 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000680)='net/hci\x00') getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500), &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x0, 0x8}, &(0x7f0000000740)=0x19) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000004c0)={r3, 0x8}, 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r4, &(0x7f00000003c0), 0x812, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f000037aff8)=@fragment, 0x8) sendmmsg(r6, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) [ 247.456452] device lo entered promiscuous mode [ 247.486903] device lo left promiscuous mode [ 247.492953] PPPIOCDETACH file->f_count=2 2033/05/18 03:33:25 executing program 6: accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000740), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000000)) 2033/05/18 03:33:25 executing program 5: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2033/05/18 03:33:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) 2033/05/18 03:33:25 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 2033/05/18 03:33:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x3, 0x4400) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) r0 = inotify_init1(0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2000}, {}, {r0}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}], 0x5, 0x8) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002e40)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0001, 0x0) sched_getaffinity(0x0, 0x6e84f782, &(0x7f0000002e00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00001bbf52)=""/174) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x16, 0x1, 0xa5}) close(r2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0x8) 2033/05/18 03:33:25 executing program 6: accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000740), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000000)) 2033/05/18 03:33:25 executing program 5: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:25 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) r0 = memfd_create(&(0x7f0000000040)='proc-\x00', 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r1 = inotify_init1(0x0) getrusage(0xffffffffffffffff, &(0x7f0000000300)) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r3 = getpgrp(0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000640), 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1b0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000100)={r5, 0x8}) 2033/05/18 03:33:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) ppoll(&(0x7f0000000700)=[{r0, 0x40}, {r0, 0x400}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f00000006c0)={0x3}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000001000)=0xfffffcc4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2033/05/18 03:33:25 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000afdf)={0x28, 0x0, 0x0, @fuse_notify_inval_inode_out}, 0x28) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) recvmsg(r0, &(0x7f00002ed000)={&(0x7f0000559fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000686fa0)=[{&(0x7f0000ae3000)=""/22, 0xffffff08}], 0x1, &(0x7f0000f1b000)=""/4096, 0xffffffffffffff73}, 0x121) 2033/05/18 03:33:25 executing program 5: r0 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)="89", 0x1, r0) keyctl$negate(0xb, r1, 0x0, 0x0) [ 248.456275] PPPIOCDETACH file->f_count=2 2033/05/18 03:33:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x3, 0x4400) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) r0 = inotify_init1(0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2000}, {}, {r0}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}], 0x5, 0x8) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002e40)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0001, 0x0) sched_getaffinity(0x0, 0x6e84f782, &(0x7f0000002e00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00001bbf52)=""/174) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x16, 0x1, 0xa5}) close(r2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0x8) 2033/05/18 03:33:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000), 0x14e) [ 248.607320] PPPIOCDETACH file->f_count=2 2033/05/18 03:33:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) 2033/05/18 03:33:26 executing program 5: r0 = socket(0x200000000010, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000002a007f000000000000ed7601000000ff01000000000000ffff0100ff10000b00", 0x24) 2033/05/18 03:33:26 executing program 6: r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8280, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x1, 0x3, 0x7fff, 0x3, 0x0, 0x3f, 0x8, 0x4, 0x80000001, 0x2, 0x8, 0x7fbfffff, 0xfffffffffffffff9, 0x200, 0x40, 0x8f, 0x2d8, 0x7, 0x200, 0x2, 0xb8, 0x4a, 0x5, 0xffffffffffff2c3b, 0x3, 0x4, 0x2, 0x80000001, 0xf26d, 0x0, 0x3, 0xfffffffffffff756, 0x10000, 0x5, 0x5, 0x85, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000500)}, 0x0, 0x1, 0x41, 0x0, 0x3, 0x5, 0x5}, r1, 0x0, r0, 0x9) r2 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x9, 0x400000) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1003f) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x4], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x20, 0x2, 0x4, 0x0, 0x2e4, 0x0, 0x5ab056831d2ceb9, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0xfffffffffffff801, 0x0, 0x0, 0x800, 0x7, 0x4, 0x6, 0x8, 0x800, 0x20, 0x1f, 0x0, 0x7, 0x8, 0x81, 0x5d9, 0x8, 0x4, 0x0, 0x80000001, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0xbd, 0x9}, 0x8000, 0x2, 0x80000000000000, 0x2, 0x0, 0x8, 0x9}, r2, 0x7, 0xffffffffffffffff, 0xa) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x20}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYRES16], 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020660b, &(0x7f00000001c0)) ioctl$TCXONC(r2, 0x540a, 0x3f) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) ioprio_set$uid(0x3, 0x0, 0x7ff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0xdfd, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, 0x0, 0x7}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000480)={r6, 0x6}, &(0x7f00000004c0)=0x8) connect$l2tp(r4, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x4, 0x3, 0x3, 0x2}}, 0x2e) 2033/05/18 03:33:26 executing program 0: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x3, 0x4400) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) r0 = inotify_init1(0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2000}, {}, {r0}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}], 0x5, 0x8) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002e40)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0001, 0x0) sched_getaffinity(0x0, 0x6e84f782, &(0x7f0000002e00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00001bbf52)=""/174) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x16, 0x1, 0xa5}) close(r2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0x8) 2033/05/18 03:33:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) ppoll(&(0x7f0000000700)=[{r0, 0x40}, {r0, 0x400}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f00000006c0)={0x3}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000001000)=0xfffffcc4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2033/05/18 03:33:26 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) r0 = memfd_create(&(0x7f0000000040)='proc-\x00', 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r1 = inotify_init1(0x0) getrusage(0xffffffffffffffff, &(0x7f0000000300)) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r3 = getpgrp(0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000640), 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1b0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000100)={r5, 0x8}) 2033/05/18 03:33:26 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000afdf)={0x28, 0x0, 0x0, @fuse_notify_inval_inode_out}, 0x28) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) recvmsg(r0, &(0x7f00002ed000)={&(0x7f0000559fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000686fa0)=[{&(0x7f0000ae3000)=""/22, 0xffffff08}], 0x1, &(0x7f0000f1b000)=""/4096, 0xffffffffffffff73}, 0x121) 2033/05/18 03:33:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 2033/05/18 03:33:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) [ 249.468090] PPPIOCDETACH file->f_count=2 2033/05/18 03:33:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) 2033/05/18 03:33:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x400, 0x0, 0xff, 0x1}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80}, 0x400, 0x2}, 0x20) 2033/05/18 03:33:26 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000240)={0xffff, 0x3, 0x1}) r2 = socket$inet6(0xa, 0x3, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0xc0000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x9, 0x1, 0x81, 0x0, 0xffffffffffff7fff, 0xa0000, 0x5, 0x5, 0x9, 0x8000, 0x5, 0x8, 0x4, 0x8, 0xf3, 0xf70d, 0x2, 0x400, 0x7ff, 0x0, 0x310, 0x81, 0x3, 0x7, 0x1, 0x844, 0x9, 0x0, 0x401, 0x0, 0x5, 0x8, 0x1, 0x6c, 0x5, 0x0, 0x9, 0x4, @perf_config_ext={0xba7c, 0x458}, 0x1000, 0x7fff, 0x0, 0x2, 0xa7, 0x6}, r4, 0xd, r3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) dup3(r0, r2, 0x0) 2033/05/18 03:33:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) 2033/05/18 03:33:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) 2033/05/18 03:33:26 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000240)={0xffff, 0x3, 0x1}) r2 = socket$inet6(0xa, 0x3, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0xc0000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x9, 0x1, 0x81, 0x0, 0xffffffffffff7fff, 0xa0000, 0x5, 0x5, 0x9, 0x8000, 0x5, 0x8, 0x4, 0x8, 0xf3, 0xf70d, 0x2, 0x400, 0x7ff, 0x0, 0x310, 0x81, 0x3, 0x7, 0x1, 0x844, 0x9, 0x0, 0x401, 0x0, 0x5, 0x8, 0x1, 0x6c, 0x5, 0x0, 0x9, 0x4, @perf_config_ext={0xba7c, 0x458}, 0x1000, 0x7fff, 0x0, 0x2, 0xa7, 0x6}, r4, 0xd, r3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) dup3(r0, r2, 0x0) 2033/05/18 03:33:26 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x8, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2033/05/18 03:33:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/173, 0xad) 2033/05/18 03:33:26 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x42) fallocate(r0, 0x0, 0x0, 0x6) 2033/05/18 03:33:26 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000240)={0xffff, 0x3, 0x1}) r2 = socket$inet6(0xa, 0x3, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0xc0000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x9, 0x1, 0x81, 0x0, 0xffffffffffff7fff, 0xa0000, 0x5, 0x5, 0x9, 0x8000, 0x5, 0x8, 0x4, 0x8, 0xf3, 0xf70d, 0x2, 0x400, 0x7ff, 0x0, 0x310, 0x81, 0x3, 0x7, 0x1, 0x844, 0x9, 0x0, 0x401, 0x0, 0x5, 0x8, 0x1, 0x6c, 0x5, 0x0, 0x9, 0x4, @perf_config_ext={0xba7c, 0x458}, 0x1000, 0x7fff, 0x0, 0x2, 0xa7, 0x6}, r4, 0xd, r3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) dup3(r0, r2, 0x0) 2033/05/18 03:33:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000006c0)=ANY=[]) creat(&(0x7f0000000080)='./file0/.ile0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000c31000)='./control\x00', 0x86000006) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001780)=0x7643a1a8f07ef87e) 2033/05/18 03:33:27 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="00020000000000000708000000000000000001010000178d09067c1c200100ae1e140b0200000015d6a6381ad56ae56ed1597376eabb649ea905c76463e28110dca73dbc5fa0dc1a8bc7d442379b86fee48d5f10dc0278f9cd4decbd431f48f7b8de8df7354c7be0221fe84e7d1c5af895646887f8eba7a10a051c0da1bbfa7c18e0611f580e1cf715b6f9772ff0837c79734882d9add80eae993e6faa454913cf55d7d71658c3719bf645c3"], 0x1) sendto$inet6(r0, &(0x7f0000a05ae2)="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", 0x595, 0x0, &(0x7f0000658fe4)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:33:27 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) r0 = memfd_create(&(0x7f0000000040)='proc-\x00', 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r1 = inotify_init1(0x0) getrusage(0xffffffffffffffff, &(0x7f0000000300)) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r3 = getpgrp(0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000640), 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1b0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000100)={r5, 0x8}) 2033/05/18 03:33:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) ppoll(&(0x7f0000000700)=[{r0, 0x40}, {r0, 0x400}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f00000006c0)={0x3}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000001000)=0xfffffcc4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2033/05/18 03:33:27 executing program 6: perf_event_open(&(0x7f000031cf88)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) 2033/05/18 03:33:27 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000240)={0xffff, 0x3, 0x1}) r2 = socket$inet6(0xa, 0x3, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0xc0000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x9, 0x1, 0x81, 0x0, 0xffffffffffff7fff, 0xa0000, 0x5, 0x5, 0x9, 0x8000, 0x5, 0x8, 0x4, 0x8, 0xf3, 0xf70d, 0x2, 0x400, 0x7ff, 0x0, 0x310, 0x81, 0x3, 0x7, 0x1, 0x844, 0x9, 0x0, 0x401, 0x0, 0x5, 0x8, 0x1, 0x6c, 0x5, 0x0, 0x9, 0x4, @perf_config_ext={0xba7c, 0x458}, 0x1000, 0x7fff, 0x0, 0x2, 0xa7, 0x6}, r4, 0xd, r3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) dup3(r0, r2, 0x0) 2033/05/18 03:33:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48, 0x0, 0x200000000000000}]}) 2033/05/18 03:33:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1}, 0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'\x00', {0x2, 0x4e23, @multicast2=0xe0000002}}) 2033/05/18 03:33:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 2033/05/18 03:33:27 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000afdf)={0x28, 0x0, 0x0, @fuse_notify_inval_inode_out}, 0x28) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) recvmsg(r0, &(0x7f00002ed000)={&(0x7f0000559fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000686fa0)=[{&(0x7f0000ae3000)=""/22, 0xffffff08}], 0x1, &(0x7f0000f1b000)=""/4096, 0xffffffffffffff73}, 0x121) [ 250.443640] device lo entered promiscuous mode 2033/05/18 03:33:27 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2033/05/18 03:33:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2033/05/18 03:33:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000014c0), 0x1, &(0x7f0000000100)}}, {{&(0x7f0000001e00)=@generic={0x0, "5a0a1eaf00337a029913321ab02a9d1682d02408e539da6a3c2efef98b257c6ddb5310efafa23e61368c44f51b4581a3afaf734f4904475731a05bd4067dfa2a1fd36e399dbe2bec98bd4ce95b908d86d09ec6be03508493daa70fb81b41f9d90bcfbae1d5bf712aa30da6b516e4346a08b80c9f038a1f5f832d8881f1a2"}, 0x80, &(0x7f0000002200), 0xe1, &(0x7f0000002880)}, 0x9}], 0x2, 0x4040000) 2033/05/18 03:33:27 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) [ 250.547262] device lo left promiscuous mode 2033/05/18 03:33:27 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000012000)=0x3fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00005cdfb8)=[@in={0x2, 0x4e20}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00005b4000)=[@in={0x2, 0x4e20, @multicast2=0xe0000002}], 0x10) 2033/05/18 03:33:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2033/05/18 03:33:27 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r0, r0, &(0x7f00000000c0), 0x4) 2033/05/18 03:33:28 executing program 5: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000011fe8)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) 2033/05/18 03:33:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f00000003c0)='./file0/file0\x00', 0x4001, 0x0) fallocate(r1, 0x0, 0x0, 0x1fffff) ftruncate(r0, 0x19) 2033/05/18 03:33:28 executing program 2: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)={0xfffffffffffffffa}) 2033/05/18 03:33:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:33:28 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:28 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) close(r0) 2033/05/18 03:33:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2033/05/18 03:33:28 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2033/05/18 03:33:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000240)=0x6) 2033/05/18 03:33:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) 2033/05/18 03:33:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001180)=0xfffffffffffffffc) 2033/05/18 03:33:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) recvmsg(r0, &(0x7f0000bf9000)={&(0x7f0000fb9000)=@sco, 0x8, &(0x7f0000e9c000)=[{&(0x7f000024e000)=""/219, 0xdb}, {&(0x7f0000466000)=""/4096, 0x1000}, {&(0x7f0000b14f72)=""/142, 0x8e}, {&(0x7f0000820000)=""/185, 0xb9}, {&(0x7f0000a77000)=""/243, 0xf3}, {&(0x7f00001b1ffd)=""/53, 0x35}], 0x6, &(0x7f00006d6faf)=""/81, 0x51}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=ANY=[], 0x0, &(0x7f00002e6f80), 0x0, &(0x7f0000878000)}, 0x0) recvmsg(r0, &(0x7f0000355000)={&(0x7f0000d49ff4)=@nl=@proc, 0xc, &(0x7f0000378000), 0x0, &(0x7f000064ff09)=""/247, 0xf7}, 0x0) 2033/05/18 03:33:29 executing program 4: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2033/05/18 03:33:29 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000bd4aed)={@random="cd5c0b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "ff0703", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff]}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "09aea5", 0x0, 0x29, 0x0, @dev={0xfe, 0x80}, @dev={0xfe, 0x80}, [], "057147259e28ebbb"}}}}}}}, 0x0) 2033/05/18 03:33:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) 2033/05/18 03:33:29 executing program 3: r0 = dup(0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000640)={0x0, 0x2, 0x2, 0x4, 0x388aa0ca, 0x1f, 0x9, 0x0, 0x0, 0x5, 0x3}, 0xb) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=0x1000000, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000800)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$VHOST_SET_LOG_BASE(r3, 0xaf01, &(0x7f0000000280)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000000)=ANY=[]) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r4) io_setup(0x100, &(0x7f00000001c0)=0x0) io_submit(r5, 0x2, &(0x7f00000007c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x80000001, r1, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000000a00)="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", 0x1000, 0x2, 0x0, 0x0, r4}]) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001a00)={0x0, 0x1000, "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"}, &(0x7f00000006c0)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={r6, @in={{0x2, 0x4e24}}, 0xfffffffffffffffb, 0x7ff}, 0x90) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) epoll_wait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) mknod(&(0x7f0000000380)='./file0\x00', 0x40, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000f82ffc)=0x4001) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="7a1f7f740a0d67ae38129446b415b69557f5c87f40a2495b818ec56d0dae339c59692ec285399af5b59a25c1b6aad604caddd2fc3db6d948241b2cd6b3c33f4565672c4964a88aa38c375d170510b542369f1089721443e4677784d50fc67641a89718c9f5c382892bd43403677048b8db031e51a90257328f52c29dfaed0a18fdd9ac5121ac550d39e5e3fe9cad8e410ea8e4c11eb54d04458f8e7b721121bc8acc44585039ab0dbe5df02fe94a3250a0dec2f5f730dac298df8e486af0ec27ecaec0a0db320e7ec1a2205a55ada68bf633f9fd26b3867d4abc27ae73de42fe909fc92b66b39765f854432facb17dcb212a9c9153fce50b8904f076e797bc126fcd3c5e863f0f7a37567feb9c6789342cacfc6fc333c1c35046b0f5ca1ac38be6220eaec9bd3f7e719a853bb4c6f2bfb091404d0003108bcf9d421fe699c37d5352c49485eeb7902b1e70591a28b6044ec8adba3adbfa0e74b23c416b2c7a5f19f77434db04a27e3c92bf558edf8396fa610dcefd933515293f3beff618c4ab1c0c21bcca6922d19cee00d05d504e08835d2c376564cbee916664d49781096ca7ea647787358cc953b7fadc5df1213421f3fa9f0035ef138680ec53a59f1deaf32df46afacaca3e386289e3c262876647d55e0adf63c71db8be429fed33c383d93b2a04fcaff05d438dc6f64cd4eddcf595602f12342b1d4af0ac702106da96f4b917af9f29d1cbb7666418505a03c2572a4620f5144d1874c80f563b9ff38073ddae0fed6a21e7a4d87dd68c23eb92afd95171a764cbac6d9422a87c0d89a4ea5ea99eeaf779460b338ef898f5361c73d17594c3412abb199ba83e9a6d6c3123ce3db8c7a189332009f8f05621c2d254e177b5d62560230d01ffcd04c17cddff282393089888ebaf4e00f299cc1d8f88ee085f73a3b247ecc8c4b4939c95b46fb0a791e0ef085726ee7e6ae54dc43f0cb774d68bcb19f440d88c09a3d333c9cc3abcef6383be1be7bb8354c3ee57f8ee117e9d6d51fd5990faff83d1cd7a843ff3267fb7357000039bbdde4d7c74d12bbefc48ba4ab335edd10838086d9177a93aedb168bd42e97a3b2095bb54567a75b6af0fdf7aec69ab46afcf093d82f07118ca215203930eba95226403e22aeab46cdad5c273e76ca4cc87f0b5ce227c317904b8243fc9c400b1c4cf59f9d8aacf86effd9bd003034bfca9768f5408a6eab02ffbd4d3bc6211988744a524a298de1f3e00eb8964da79d1fec20b19ada8f46390417315a3d1be933cb493f7812c6e4076239618235788f26de68b5d4a70e24c838e4d2b33dd665c22dfdd4aa1e37d1d6be16cdafe7c096230e9965faddd3780ec50db2d4a5687002d1be9276a2d2ad909ba839999e75b22aa796d879973040fce480790229a4791ca5dd31fd6fee26c2b8ce482230267686f555f56e81bbc8f35847d471307ece7ae662a29a2b26ba3daeee658d0c869678ec534d83f4aa76921aadaa9b824cb342a723190a4c9c5cf22aa841a214bcdfd341098c6650425de71d785b2d02bfa6ac2d3c5a2ab171192a817ed4f5d14b5ad22e6d63390cc64e6368f276d9bbb69b015fad0931760d030d0241021eb312a20efc2e399a415758d2e2b6a0d7109b2f6a78ae6f6ab5d8246d437a53ec11166e13bb9c11c9b6b8b18df601b105e2e8a17ea05dcc179be4257e147cf77e64d780e9bbc4c497cc4b2bad53382f60e1f850153860b583102be", 0x4d1, 0xfffffffffffffffe) 2033/05/18 03:33:29 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:29 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) 2033/05/18 03:33:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001180)=0xfffffffffffffffc) 2033/05/18 03:33:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@check_relaxed='check=relaxed', 0x2c}]}) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) 2033/05/18 03:33:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@quiet='quiet', 0x2c}]}) 2033/05/18 03:33:29 executing program 4: perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000fe8ff0)={0x0, 0x989680}, &(0x7f0000401ff8), 0x8) [ 252.697777] FAT-fs (loop1): Directory bread(block 2563) failed [ 252.734187] FAT-fs (loop1): Directory bread(block 2564) failed [ 252.750221] FAT-fs (loop1): Directory bread(block 2565) failed [ 252.758885] FAT-fs (loop1): Directory bread(block 2566) failed [ 252.770958] FAT-fs (loop1): Directory bread(block 2567) failed [ 252.783362] FAT-fs (loop1): Directory bread(block 2568) failed [ 252.794801] FAT-fs (loop1): Directory bread(block 2569) failed [ 252.801075] FAT-fs (loop1): Directory bread(block 2570) failed [ 252.807179] FAT-fs (loop1): Directory bread(block 2571) failed [ 252.813277] FAT-fs (loop1): Directory bread(block 2572) failed [ 252.823905] FAT-fs (loop1): FAT read failed (blocknr 2561) 2033/05/18 03:33:30 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000a000)) close(r1) 2033/05/18 03:33:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001180)=0xfffffffffffffffc) 2033/05/18 03:33:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) 2033/05/18 03:33:30 executing program 0: syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000010c00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb25", 0x59, 0x4000009000}], 0x0, &(0x7f0000000240)) 2033/05/18 03:33:30 executing program 4: perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000fe8ff0)={0x0, 0x989680}, &(0x7f0000401ff8), 0x8) 2033/05/18 03:33:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000002800)=""/4096, 0x807}], 0x87) r1 = memfd_create(&(0x7f0000000080)="3afe39591b194fa808f1d14a28c0f7c26a995d1f73081d1af00a24", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 2033/05/18 03:33:30 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:30 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r1, r2) 2033/05/18 03:33:30 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00004f6000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x3}) 2033/05/18 03:33:30 executing program 0: socket$inet(0x2, 0x80a, 0xfff) r0 = syz_open_procfs(0x0, &(0x7f0000b23000)='net/ptype\x00') pread64(r0, &(0x7f000005a000), 0x0, 0x1fffffc) 2033/05/18 03:33:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) 2033/05/18 03:33:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001180)=0xfffffffffffffffc) 2033/05/18 03:33:30 executing program 1: prctl$seccomp(0x2f, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 2033/05/18 03:33:30 executing program 4: perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000fe8ff0)={0x0, 0x989680}, &(0x7f0000401ff8), 0x8) [ 253.557255] syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) 2033/05/18 03:33:30 executing program 1: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x40}, 0x0, &(0x7f0000045000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x60) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x312, @time}) 2033/05/18 03:33:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x2, 0x40000fb) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getpolicy={0x64, 0x15, 0x100, 0x70bd25, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, [], 0x18}, @in, 0x4e21, 0x0, 0x4e23, 0x1, 0x2, 0x80, 0x80}, 0x6e6bbf, 0x3}, [@output_mark={0x8, 0x1d, 0x5af}, @mark={0xc, 0x15, {0x350759, 0x6de}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) move_pages(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000440)=[0x2, 0x400], &(0x7f0000000480)=[0x0], 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x1a8, &(0x7f0000346fc8)=@framed={{0x18}, [@alu], {0x95}}, &(0x7f0000000140)="c8504c006c1c80c4b9a066dc2f377d372cec9a8fab9d6182f7e8d2b25fcf26f34386c377c5dfd71691d52454ddba2cb34052951b7edda9bad0e1ddc29cd24f439edb13c33e820542dea6f145a689a55155875301b9bc0d4e26bc8b27bd2675b4928ef332138bb14f2a0dda87ee65cfa4f6f1139143af5c647b2edcdeca51be313656787590319356ee3db93b8bda795333702dcdcb4858db0e019bb7409649ac6ad784f5509c35281905e9", 0x0, 0xffffffffffffffba, &(0x7f0000000040)=""/251}, 0x1d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000540)={0x1000, 0x47e, 0x7, {}, 0x3, 0x6}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x2, 0x0, 0xfffffffffffff800, 0x2, 0x1, 0x20, 0x2, 0xfffffffffffffffb, 0x1f, 0x3f}) 2033/05/18 03:33:30 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 2033/05/18 03:33:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0xcb8, [0x0, 0x200001c0, 0x200002e0, 0x20000d30], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'ip6gre0\x00', 'bridge0\x00', 'syzkaller1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xc0, 0xf0}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x39, 'syz1\x00'}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x0, 'syzkaller1\x00', 'gre0\x00', 'bcsf0\x00', 'gre0\x00', @random="b63e60ccc2ef", [], @random="7428f85431fe", [], 0x8a0, 0x8d0, 0x900, [@limit={'limit\x00', 0x20}, @u32={'u32\x00', 0x7c0, {{[{}, {}, {}, {}, {}, {}, {}, {}, {}, {[{}, {}, {}, {0x98a5}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}]}}}]}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {{{0x3, 0x0, 0x0, 'erspan0\x00', 'lo\x00', 'nr0\x00', 'gre0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xa0, 0xf0, 0x120, [@vlan={'vlan\x00', 0x8}]}, [@common=@log={'log\x00', 0x28, {{0x0, "9c2443b6d4f9746e18b6a79bcf931d93a0f784965e835a4d0b175bc381e4"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'ifb0\x00', '\x00', 'ip6gretap0\x00', 'erspan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xe8, 0x118}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "f4dccdf0902bbb364e32e0e365ba9ad34f7b9a87c50ca8cad5661c6f7addb9a98ec391659ac5404fbd73ec82365812e72f8ac0a5977191cdae2824569ed36e2f"}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}]}, 0xd30) [ 253.726404] xt_AUDIT: Audit type out of range (valid range: 0..2) 2033/05/18 03:33:31 executing program 3: msgsnd(0x0, &(0x7f000010d000)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/56}, 0x40, 0x0, 0x0) msgsnd(0x0, &(0x7f0000be2f0a)=ANY=[@ANYBLOB="000000e5"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000745000)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 2033/05/18 03:33:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x5, &(0x7f000005a000)) 2033/05/18 03:33:31 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) recvmsg(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001d00)=""/179, 0xb3}, 0x0) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x49, &(0x7f0000000200)}, 0x0) 2033/05/18 03:33:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='\x00', 0x1, r0) 2033/05/18 03:33:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x53, r0, 0x0) 2033/05/18 03:33:31 executing program 4: perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000fe8ff0)={0x0, 0x989680}, &(0x7f0000401ff8), 0x8) 2033/05/18 03:33:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)="47ff3300", 0x5, 0x99, &(0x7f0000000140)=""/153}, 0x48) 2033/05/18 03:33:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000270027000f8", 0x16}], 0x0, &(0x7f0000000e80)=ANY=[]) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0/file.\x00', 0x0, 0x0) 2033/05/18 03:33:31 executing program 2: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3) [ 254.422450] FAT-fs (loop7): Directory bread(block 5) failed [ 254.454898] FAT-fs (loop7): Directory bread(block 6) failed [ 254.487411] FAT-fs (loop7): Directory bread(block 7) failed [ 254.507721] FAT-fs (loop7): Directory bread(block 8) failed [ 254.528508] FAT-fs (loop7): Directory bread(block 9) failed [ 254.542480] FAT-fs (loop7): Directory bread(block 10) failed [ 254.548468] FAT-fs (loop7): Directory bread(block 11) failed [ 254.554448] FAT-fs (loop7): Directory bread(block 12) failed [ 254.560380] FAT-fs (loop7): Directory bread(block 13) failed [ 254.566480] FAT-fs (loop7): Directory bread(block 14) failed 2033/05/18 03:33:32 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="11634840"], 0x74, 0x0, &(0x7f00000006c0)="684f4b60f68c3ea854d1d4e65fa76fd9ab258c88ac58d96229cb17eccceb2b785b587b77fe08b5c3e213603a5dbaa3aa764245ffe9b9e8b4dfb953ff122e052c45f8f9e716e60e45ee088b32c108fb0b022a72cf5c64aeaefba3c0b63253d4d191a17c2d51c809fee963c21c49504b765fb52ca6"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, r1, 0x1}], 0x0, 0x0, &(0x7f0000000480)}) 2033/05/18 03:33:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00001c1000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000021dfb0)={{0x8}}) 2033/05/18 03:33:32 executing program 3: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f000022b000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000003500)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@NDA_LLADDR={0xc, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr}]}, 0x30}, 0x1}, 0x0) 2033/05/18 03:33:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000140)="53eb7517caf508f5c138efd44fa35028edfe1a554763ccf9a0da296fd67a6e59b2778f9b68ee0160abbb9766f3e1947ca79df6213ede6fc07bd9e74e153b66391cfac5dad8", 0x45) 2033/05/18 03:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x401) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) read(r0, &(0x7f0000000280)=""/217, 0x368) ioctl$TCXONC(r1, 0x540a, 0x0) 2033/05/18 03:33:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)) 2033/05/18 03:33:32 executing program 7: mremap(&(0x7f0000a94000/0x1000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000b18000/0xe000)=nil) 2033/05/18 03:33:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x2000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffff11, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000001c0)) 2033/05/18 03:33:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002780)="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", 0x148}], 0x1, &(0x7f0000000080)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2033/05/18 03:33:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:33:32 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="4c0000001000ff20d938d90e6fc283b724a600800200000000000000000000402c00160003040280b598bc593ab68211030030de33a49868c62b2da654a6613b6aabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) [ 255.516258] binder: 18242:18246 got new transaction with bad transaction stack, transaction 50 has target 18242:0 [ 255.526814] binder: 18242:18246 transaction failed 29201/-71, size 0-0 line 2875 2033/05/18 03:33:32 executing program 0: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000e7e000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ec9000/0x2000)=nil) shmdt(r1) 2033/05/18 03:33:32 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) [ 255.589562] binder: BINDER_SET_CONTEXT_MGR already set [ 255.614539] binder: 18242:18256 ioctl 40046207 0 returned -16 2033/05/18 03:33:32 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000000)={@pi, @hdr={0x3, 0x3, 0x0, 0x6}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @rand_addr}}, 0x2a) [ 255.645925] binder_alloc: 18242: binder_alloc_buf, no vma [ 255.651633] binder: 18242:18246 transaction failed 29189/-3, size 40-8 line 2963 2033/05/18 03:33:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)={[0x36]}, 0x1) 2033/05/18 03:33:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r2, &(0x7f000000f000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) [ 255.695606] binder_alloc: 18242: binder_alloc_buf, no vma [ 255.701323] binder: 18242:18256 transaction failed 29189/-3, size 0-0 line 2963 [ 255.733954] binder: 18242:18280 BC_ACQUIRE_DONE u00000000204edf8a no match [ 255.818311] binder: undelivered TRANSACTION_ERROR: 29189 [ 255.823980] binder: release 18242:18246 transaction 50 out, still active [ 255.831252] binder: send failed reply for transaction 50, target dead 2033/05/18 03:33:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:33:33 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2033/05/18 03:33:33 executing program 4: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x20, 0xfffffffffc000003, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:33:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)={[0x36]}, 0x1) 2033/05/18 03:33:33 executing program 3: mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) 2033/05/18 03:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="11634840"], 0x74, 0x0, &(0x7f00000006c0)="684f4b60f68c3ea854d1d4e65fa76fd9ab258c88ac58d96229cb17eccceb2b785b587b77fe08b5c3e213603a5dbaa3aa764245ffe9b9e8b4dfb953ff122e052c45f8f9e716e60e45ee088b32c108fb0b022a72cf5c64aeaefba3c0b63253d4d191a17c2d51c809fee963c21c49504b765fb52ca6"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, r1, 0x1}], 0x0, 0x0, &(0x7f0000000480)}) 2033/05/18 03:33:33 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r2, &(0x7f000000f000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2033/05/18 03:33:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)={[0x36]}, 0x1) 2033/05/18 03:33:33 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r2, &(0x7f000000f000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2033/05/18 03:33:33 executing program 1: clock_nanosleep(0x80000200000000c, 0x0, &(0x7f0000000080), &(0x7f0000000080)) [ 256.395930] binder: 18293:18301 got new transaction with bad transaction stack, transaction 57 has target 18293:0 [ 256.406472] binder: 18293:18301 transaction failed 29201/-71, size 0-0 line 2875 2033/05/18 03:33:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:33:33 executing program 2: add_key(&(0x7f00004f5000)='keyring\x00', &(0x7f00008db000)={0x2e, 0x79, 0x7a}, 0x0, 0x394, 0xffffffffffffffff) 2033/05/18 03:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="11634840"], 0x74, 0x0, &(0x7f00000006c0)="684f4b60f68c3ea854d1d4e65fa76fd9ab258c88ac58d96229cb17eccceb2b785b587b77fe08b5c3e213603a5dbaa3aa764245ffe9b9e8b4dfb953ff122e052c45f8f9e716e60e45ee088b32c108fb0b022a72cf5c64aeaefba3c0b63253d4d191a17c2d51c809fee963c21c49504b765fb52ca6"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, r1, 0x1}], 0x0, 0x0, &(0x7f0000000480)}) 2033/05/18 03:33:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)={[0x36]}, 0x1) 2033/05/18 03:33:33 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r2, &(0x7f000000f000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2033/05/18 03:33:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf}}) [ 256.518261] binder: release 18293:18301 transaction 57 out, still active [ 256.525279] binder: send failed reply for transaction 57, target dead 2033/05/18 03:33:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="c0d0091ee98c34ccd1a2f8b64dc0445e9d2b1b46248d07f2375cc4d8cc5d2c19", 0x20}], 0x1, &(0x7f0000000240)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 256.578532] binder: 18325:18328 got new transaction with bad transaction stack, transaction 62 has target 18325:0 [ 256.589092] binder: 18325:18328 transaction failed 29201/-71, size 0-0 line 2875 [ 256.692542] binder: release 18325:18328 transaction 62 out, still active [ 256.699599] binder: send failed reply for transaction 62, target dead 2033/05/18 03:33:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) 2033/05/18 03:33:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x84000) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x7fffffff, {0x2, 0x4e20}, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e22, @broadcast=0xffffffff}, 0x200, 0x1, 0x7, 0x3f, 0x0, &(0x7f0000000000)='syz_tun\x00', 0x6, 0x2, 0x4}) sendto$inet(r0, &(0x7f0000fa0fff), 0x0, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2033/05/18 03:33:34 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) 2033/05/18 03:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="11634840"], 0x74, 0x0, &(0x7f00000006c0)="684f4b60f68c3ea854d1d4e65fa76fd9ab258c88ac58d96229cb17eccceb2b785b587b77fe08b5c3e213603a5dbaa3aa764245ffe9b9e8b4dfb953ff122e052c45f8f9e716e60e45ee088b32c108fb0b022a72cf5c64aeaefba3c0b63253d4d191a17c2d51c809fee963c21c49504b765fb52ca6"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, r1, 0x1}], 0x0, 0x0, &(0x7f0000000480)}) 2033/05/18 03:33:34 executing program 3: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:34 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000006300)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@resolve_route={0x4, 0x8, 0xfa00, {r1}}, 0x10) 2033/05/18 03:33:34 executing program 4: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="c4e17d7f2f66b8e5000f00d8c4619f10e92e0f32410f01df26410f08260f01d564460f4745002e66470f388131d9f2", 0x2f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 257.375689] binder: 18356:18358 got new transaction with bad transaction stack, transaction 67 has target 18356:0 [ 257.386299] binder: 18356:18358 transaction failed 29201/-71, size 0-0 line 2875 2033/05/18 03:33:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) 2033/05/18 03:33:34 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000005040)={'erspan0\x00', &(0x7f00000050c0)=ANY=[@ANYBLOB="4b0000000e"]}) 2033/05/18 03:33:34 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000357000)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00004e2ff8)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x402, 0xffffffffffffffff) fcntl$dupfd(r0, 0x280000000000402, r1) 2033/05/18 03:33:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) 2033/05/18 03:33:34 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cd3997030f0000000000000086dd60b409000030000000000000000000000000ffffe0000002ff0229"], 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, &(0x7f0000000000)={"62726964676530000200"}) 2033/05/18 03:33:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000cc0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000400)=@setlink={0x24, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x4, 0x16}]}, 0x24}, 0x1}, 0x0) [ 257.562062] binder: release 18356:18358 transaction 67 out, still active [ 257.569130] binder: send failed reply for transaction 67, target dead 2033/05/18 03:33:34 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) 2033/05/18 03:33:34 executing program 3: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:34 executing program 7: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) [ 257.652884] IPVS: stopping master sync thread 9248 ... 2033/05/18 03:33:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 2033/05/18 03:33:34 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000d86000)='syscall\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) sendfile(r0, r1, &(0x7f00004f1000), 0x4) 2033/05/18 03:33:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 257.768239] bond0 (unregistering): Released all slaves [ 257.965154] IPVS: ftp: loaded support on port[0] = 21 [ 258.905099] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 259.770082] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 259.776192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.848692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.923499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.929680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.936688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2033/05/18 03:33:37 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) fsync(r0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 2033/05/18 03:33:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000014c0)="240000004e001f0014f9f4070008f414020806f70d000100020001000400000000040008", 0x24) 2033/05/18 03:33:37 executing program 7: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) 2033/05/18 03:33:37 executing program 2: r0 = open(&(0x7f000084aff8)='./file0\x00', 0x400000000060842, 0x0) fsetxattr(r0, &(0x7f0000095ff7)=@known='user.syz\x00', &(0x7f0000000000)="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", 0x174, 0x0) getxattr(&(0x7f0000d61ff8)='./file0\x00', &(0x7f00004e9000)=@known='user.syz\x00', &(0x7f000002e000), 0xc) 2033/05/18 03:33:37 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) 2033/05/18 03:33:37 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000d86000)='syscall\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) sendfile(r0, r1, &(0x7f00004f1000), 0x4) 2033/05/18 03:33:37 executing program 3: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:37 executing program 4: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 2033/05/18 03:33:38 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 2033/05/18 03:33:38 executing program 7: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) 2033/05/18 03:33:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x6c072, 0xffffffffffffffff, 0x0) 2033/05/18 03:33:38 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)=@pic={0x8, 0x6b2, 0xffff, 0x1a, 0x3, 0x0, 0x3, 0x1, 0x200, 0x4, 0x3, 0x1000, 0x5, 0x0, 0x9, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x80800, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x800, 0x80002, 0x0, 0x0, 0x8004}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xf8, 0x48000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fffffff}]}) 2033/05/18 03:33:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xc3, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000680f74)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000200"}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2033/05/18 03:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000449fd0)={0x0, 0x0, &(0x7f00004f1f94), 0x1, 0x0, &(0x7f0000901000)="05"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000ed8000)="f5"}) 2033/05/18 03:33:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 2033/05/18 03:33:38 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000d86000)='syscall\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) sendfile(r0, r1, &(0x7f00004f1000), 0x4) 2033/05/18 03:33:38 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={"6272696447653000e5ff00", 0x5fe}) 2033/05/18 03:33:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 2033/05/18 03:33:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000580)={0x1, 0x5, 0x20, 0x8}, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0xa86, 0x4}, &(0x7f0000000540)=0x8) r3 = socket$inet(0x2, 0x80a, 0x0) sendto(r3, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000f34000)=@ethernet={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x12) sendmmsg$alg(r2, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x15}}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x73, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x584}}, 0x2, 0xff, 0xfffffffffffffffe, 0x8a99, 0xc}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r4, 0x4, 0x3, 0x36297ac8}, &(0x7f00000002c0)=0x10) getpeername(r0, &(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0xfffffffffffffdd3) socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x80800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="29000000fe0f84d118443ebe67318b98e5c5b22e8368720e54e1f0ec0a09dc5fb4185174105d70327565a76299f8006ae860b3fb6a7b5ffaa79777fd8778a60bcfc7f543104d9a5d5d488523dadfc48aa4257d238d5320438ca3a78270b5e561b0d8434758d2d2b8517ae11c6468d241c0affea0ec0b92455d46d97d8b60a842d2697ecf6e815c290fda965a23bc27dd15d16c87f061baa62c067e29cccb9225507ed851af5796e4343be9212d405e5161dc98951d8d05a7131eff070000000000006d4106810d46a81e0d4bb5bb1496b490f440088909ad636ab3db64b8c195fbdcb1a86844b7e24f2aaefba4500778df7dd82a5c1e"], &(0x7f0000000380)=0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) 2033/05/18 03:33:38 executing program 7: mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x2, 0x10) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$void(r0, 0xc0045878) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="57f497c07989c619e48c28775f63e222da551e9b6789bb5d6fde46b2dc89543af1a8f144729ae36f", 0x28}], 0x1, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x200, 0x0, 0x1000000000000002}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x10001}, 0x8) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000000012, r3) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) 2033/05/18 03:33:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) [ 261.260205] mmap: syz-executor7 (18631) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2033/05/18 03:33:39 executing program 4: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2033/05/18 03:33:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpusclusive\x00', 0x2, 0x0) getitimer(0x2, &(0x7f0000000040)) 2033/05/18 03:33:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f0000002000)) 2033/05/18 03:33:39 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"74756e6c30000000e5ff00", 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000100)="53d5616b", 0x4) 2033/05/18 03:33:39 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000d86000)='syscall\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) sendfile(r0, r1, &(0x7f00004f1000), 0x4) 2033/05/18 03:33:39 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) clone(0x881003ff, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000e9b000), &(0x7f0000000280)) 2033/05/18 03:33:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}, {@in=@broadcast=0xffffffff, 0x0, 0x6c}, @in6=@mcast2={0xff, 0x2, [], 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8, 0x1d}, @replay_val={0x10, 0xa}, @algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x123cdfffc2a}}]}, 0x150}, 0x1}, 0x0) 2033/05/18 03:33:39 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_eee={0x44}}) 2033/05/18 03:33:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x3f}, 0x26) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x188, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0xbc, &(0x7f0000000480)="072a65dcac1e3a403d44d526830b", &(0x7f0000000580)=""/188}, 0x28) 2033/05/18 03:33:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 2033/05/18 03:33:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2033/05/18 03:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2}, 0x10) 2033/05/18 03:33:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpusclusive\x00', 0x2, 0x0) getitimer(0x2, &(0x7f0000000040)) 2033/05/18 03:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2}, 0x10) 2033/05/18 03:33:39 executing program 3: r0 = socket$inet6(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000003fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000100)="5500000018007fb0b72d1cb2a4a280930206000000a843096c26236925000b0000040149a3c728f1c46b7b31afdc1338d54400009b841322fabe0cec6bab91da0000000000000000000000000000003baba803d6a2", 0x55}], 0x1, &(0x7f0000ccd000)}, 0x0) 2033/05/18 03:33:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000140)=@in={0x2, 0x4e21, @rand_addr=0x2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) [ 262.279457] netlink: 'syz-executor3': attribute type 11 has an invalid length. 2033/05/18 03:33:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2033/05/18 03:33:40 executing program 7: capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f000062cffc)=0x6, 0x4) 2033/05/18 03:33:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2033/05/18 03:33:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) listen(r0, 0x0) 2033/05/18 03:33:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000100)={0x1f}, 0x7) 2033/05/18 03:33:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpusclusive\x00', 0x2, 0x0) getitimer(0x2, &(0x7f0000000040)) 2033/05/18 03:33:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2}, 0x10) 2033/05/18 03:33:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)='/selinux/status\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) fallocate(r0, 0x0, 0x4b99, 0x5) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_TYPE={0x8, 0x4}]}, 0x20}, 0x1}, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) preadv(r0, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/82, 0xffffff67}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)}], 0x5, 0x0) [ 263.120113] capability: warning: `syz-executor7' uses deprecated v2 capabilities in a way that may be insecure 2033/05/18 03:33:40 executing program 0: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1, 0x400, 0xd53, 0x3ff}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x3}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x2d, 0xd65484de4ce62ee9, 0x0, 0x0, {0x2}, [@generic="12"]}, 0x18}, 0x1}, 0x0) 2033/05/18 03:33:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpusclusive\x00', 0x2, 0x0) getitimer(0x2, &(0x7f0000000040)) 2033/05/18 03:33:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000480)={0x0, 0x0}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000753000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="0fc7280f080f20030f01727166ba4200b834000000ef66bad10466edb81da1fb500f23d00f21f835300000050f23f8c4c3194bfc360f20030fc76d08", 0x3c}], 0x1, 0x0, &(0x7f0000000380), 0x10000181) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:33:40 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f000088affc), 0x4) 2033/05/18 03:33:40 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000008006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) 2033/05/18 03:33:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') read(r0, &(0x7f0000000680)=""/244, 0xf4) 2033/05/18 03:33:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2}, 0x10) 2033/05/18 03:33:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendto(r0, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x90, &(0x7f00000000c0)=""/144, 0x41f00, 0x1, [], r1}, 0x48) 2033/05/18 03:33:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2033/05/18 03:33:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0x14, 0x20, 0xafd, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:33:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) sched_rr_get_interval(0x0, &(0x7f00004bb4a0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r2}, {0x0, r2}}, &(0x7f0000ec6000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2033/05/18 03:33:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x30, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x10, 0x2b, [@nested={0xc, 0x2, [@typed={0x8, 0x0, @fd}]}]}]}, 0x30}, 0x1}, 0x0) 2033/05/18 03:33:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') read(r0, &(0x7f0000000680)=""/244, 0xf4) 2033/05/18 03:33:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet(0x2, 0xa, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0xfffffffffffff6a2, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) gettid() sendmsg$unix(r4, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="6dc95980a1924286d098b55e644d611ef1d29f968b79ff95dc00685ad6e4c5b8cd7115dc492ec052c8a2d4154c9f705985ed7a4e601e408df061bc98c458cb0d53592bcb0b5b231b2eb693b6e0aede29ac0e17ac845d9ce113a45f5cd490ed7691ceb875f10bd8ab17c07696d44e4e8f875b043e74bb6e", 0x77}], 0x1, &(0x7f00000005c0), 0x0, 0xb95c1172567e0efd}, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001040), 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) clone(0x0, &(0x7f0000000240), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x80040) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r6, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f8, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000080)="48803d6b61439579b6d04dd4102d09b21f8e3ef66a49b9acdf65e7fc2c583929"}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xaacf}}}, &(0x7f00000002c0)=0x84) 2033/05/18 03:33:41 executing program 7: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) ftruncate(r0, 0x200000) read(r0, &(0x7f00000004c0)=""/50, 0xfffffe9e) 2033/05/18 03:33:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e735e83629670c777e332f05bcfd563bc015de12e7e18d18ab642efe6e70632affcaed0e6c7406a92783766e5691f882d0d795a4b6f7cab6c19", 0x70}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2033/05/18 03:33:41 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000014c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2275, &(0x7f00004a2000)) [ 264.125546] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 264.163000] netlink: 'syz-executor5': attribute type 2 has an invalid length. 2033/05/18 03:33:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') read(r0, &(0x7f0000000680)=""/244, 0xf4) 2033/05/18 03:33:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2033/05/18 03:33:41 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x1401}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)='e', 0x1}], 0x1, 0x0) 2033/05/18 03:33:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, [0xdf06, 0x1, 0x7ff, 0x6, 0x100000001, 0x7, 0x8001, 0x9, 0x7, 0xff, 0x8001, 0x7, 0x1a1, 0x5, 0x5]}, &(0x7f00000001c0)=0x100) r3 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x1, 0x200000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000340)={{0x5, 0x7, 0x6, 0x80000000, 0x1ed, 0x9}, 0x1}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0xae7a, 0x80000000, 0x6, 0x3, 0x40}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x20, 0xfffffffffc000003, 0x0, 0x0, {0x400000000006}, [@typed={0x14, 0xa, @ipv6=@loopback={0x0, 0x1}}]}, 0x28}, 0x1}, 0x0) 2033/05/18 03:33:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') read(r0, &(0x7f0000000680)=""/244, 0xf4) 2033/05/18 03:33:41 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000014c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2275, &(0x7f00004a2000)) 2033/05/18 03:33:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2033/05/18 03:33:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 2033/05/18 03:33:42 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host=0x2}, 0x10) 2033/05/18 03:33:42 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00') 2033/05/18 03:33:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000014c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2275, &(0x7f00004a2000)) 2033/05/18 03:33:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2033/05/18 03:33:42 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000003, 0x0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x0, 0x7f, 0x0, 0x0, r1, 0x80000000}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfff) socketpair(0x4, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080)="b02e82b8cc655398979911284b03a01b4483911b050efd8d0c3567c7ffc01b87f7598b19d6a70d55bc2541b249d4ef0aeae229574b1438", &(0x7f0000000940)="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", 0x2}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000000) perf_event_open(&(0x7f000025c000)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7, 0xfff, 0x100000001, 0xfffffffffffffffb, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x5, 0x8, 0x1, 0x8106, 0x0, 0x14000000000, 0x80000000, 0x1, 0x5, 0x0, 0x40, 0x2839, 0x1d, 0x800, 0x7, 0x8, 0x3, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x758, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x8, 0x3}, r6, 0x2, r4, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000740)="03812dfba9cf29d7d97aae706c6163bcf224bd0534e64ad5626ab3c86d496778a84df50c0aecd9fffc6a1f136cc3eced08d0cc305441d1b6ee21f7be711dd16a6e88d5f6e76872eb2c4d4d93f300e8eb8f88ef35253b8f32e4ca079e5dcb7bd7b70147cbd1ec57f25a8f4533841d529f1344cc391251bf98b9b4223a2f0319b3f35ccd7dbfc161cd31cd7c30858c962380e2d8f16a", &(0x7f0000000580)="69269246c2a63a64f4d8d126d4bdfd06c98a9d0aface67282d0a", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x8, 0x6bcb8e63, 0x1, 0x59ad, 0x12, r0, 0x8001}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r0, &(0x7f0000000840), &(0x7f00000008c0)=""/70}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffff8f, &(0x7f0000000300)}, 0x10) 2033/05/18 03:33:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet(0x2, 0xa, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0xfffffffffffff6a2, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) gettid() sendmsg$unix(r4, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="6dc95980a1924286d098b55e644d611ef1d29f968b79ff95dc00685ad6e4c5b8cd7115dc492ec052c8a2d4154c9f705985ed7a4e601e408df061bc98c458cb0d53592bcb0b5b231b2eb693b6e0aede29ac0e17ac845d9ce113a45f5cd490ed7691ceb875f10bd8ab17c07696d44e4e8f875b043e74bb6e", 0x77}], 0x1, &(0x7f00000005c0), 0x0, 0xb95c1172567e0efd}, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001040), 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) clone(0x0, &(0x7f0000000240), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x80040) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r6, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f8, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000080)="48803d6b61439579b6d04dd4102d09b21f8e3ef66a49b9acdf65e7fc2c583929"}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xaacf}}}, &(0x7f00000002c0)=0x84) 2033/05/18 03:33:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet(0x2, 0xa, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0xfffffffffffff6a2, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) gettid() sendmsg$unix(r4, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="6dc95980a1924286d098b55e644d611ef1d29f968b79ff95dc00685ad6e4c5b8cd7115dc492ec052c8a2d4154c9f705985ed7a4e601e408df061bc98c458cb0d53592bcb0b5b231b2eb693b6e0aede29ac0e17ac845d9ce113a45f5cd490ed7691ceb875f10bd8ab17c07696d44e4e8f875b043e74bb6e", 0x77}], 0x1, &(0x7f00000005c0), 0x0, 0xb95c1172567e0efd}, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001040), 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) clone(0x0, &(0x7f0000000240), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x80040) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r6, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f8, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000080)="48803d6b61439579b6d04dd4102d09b21f8e3ef66a49b9acdf65e7fc2c583929"}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xaacf}}}, &(0x7f00000002c0)=0x84) 2033/05/18 03:33:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet(0x2, 0xa, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0xfffffffffffff6a2, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) gettid() sendmsg$unix(r4, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="6dc95980a1924286d098b55e644d611ef1d29f968b79ff95dc00685ad6e4c5b8cd7115dc492ec052c8a2d4154c9f705985ed7a4e601e408df061bc98c458cb0d53592bcb0b5b231b2eb693b6e0aede29ac0e17ac845d9ce113a45f5cd490ed7691ceb875f10bd8ab17c07696d44e4e8f875b043e74bb6e", 0x77}], 0x1, &(0x7f00000005c0), 0x0, 0xb95c1172567e0efd}, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001040), 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) clone(0x0, &(0x7f0000000240), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x80040) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r6, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f8, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000080)="48803d6b61439579b6d04dd4102d09b21f8e3ef66a49b9acdf65e7fc2c583929"}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xaacf}}}, &(0x7f00000002c0)=0x84) 2033/05/18 03:33:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000080)=""/82, 0x52, 0x0, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x80) 2033/05/18 03:33:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2033/05/18 03:33:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000014c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2275, &(0x7f00004a2000)) 2033/05/18 03:33:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bridge0\x00', 0x3ff}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f00000000c0)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/cuse\x00', 0x4000000000000400, 0x0) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000000400)=""/241) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r7, 0x0, &(0x7f00000004c0)) sendfile(r5, r5, &(0x7f0000000040), 0x1) r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x1010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)={r8}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x4400000000, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1, 0x5, 0x2}, {0x3, 0x5a, 0x40, 0x7}]}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x10) sendfile(r2, r3, &(0x7f0000000040), 0x100000000081) r10 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) splice(r10, &(0x7f0000000300), 0xffffffffffffffff, &(0x7f00000003c0), 0x812, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="88"]) 2033/05/18 03:33:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 2033/05/18 03:33:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x80000008, 0x7fff}, {0x1}]}) 2033/05/18 03:33:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) ppoll(&(0x7f0000254ffc)=[{r0}], 0x1, &(0x7f0000ebf000)={0x0, 0x989680}, &(0x7f0000599ff8), 0x8) [ 398.730031] INFO: rcu_sched self-detected stall on CPU [ 398.735489] 1-....: (124999 ticks this GP) idle=586/1/4611686018427387906 softirq=87133/87133 fqs=31238 [ 398.745385] (t=125000 jiffies g=48274 c=48273 q=2158) [ 398.750734] NMI backtrace for cpu 1 [ 398.754339] CPU: 1 PID: 18879 Comm: syz-executor2 Not tainted 4.16.0+ #2 [ 398.761154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.770480] Call Trace: [ 398.773038] [ 398.775171] dump_stack+0x1b9/0x29f [ 398.778779] ? arch_local_irq_restore+0x52/0x52 [ 398.783423] ? lock_release+0xa10/0xa10 [ 398.787380] nmi_cpu_backtrace.cold.4+0x19/0xce [ 398.792035] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 398.797207] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 398.802462] arch_trigger_cpumask_backtrace+0x14/0x20 [ 398.807634] rcu_dump_cpu_stacks+0x175/0x1c2 [ 398.812029] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 398.817035] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 398.822466] ? print_other_cpu_stall+0x4a0/0x4a0 [ 398.827203] ? debug_check_no_locks_freed+0x310/0x310 [ 398.832368] ? find_held_lock+0x36/0x1c0 [ 398.836411] ? lock_downgrade+0x8e0/0x8e0 [ 398.840534] ? debug_check_no_locks_freed+0x310/0x310 [ 398.845703] ? lock_release+0xa10/0xa10 [ 398.849655] ? graph_lock+0x170/0x170 [ 398.853440] ? graph_lock+0x170/0x170 [ 398.857219] ? graph_lock+0x170/0x170 [ 398.860999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.866521] ? graph_lock+0x170/0x170 [ 398.870300] ? graph_lock+0x170/0x170 [ 398.874082] ? __lock_is_held+0xb5/0x140 [ 398.878127] rcu_check_callbacks+0x21b/0xad0 [ 398.882513] ? rcu_cpu_stall_reset+0x210/0x210 [ 398.887072] ? trace_hardirqs_off+0xd/0x10 [ 398.891293] ? raise_softirq+0x1b2/0x450 [ 398.895332] ? raise_softirq_irqoff+0x310/0x310 [ 398.899978] ? read_boot_clock64+0x70/0x70 [ 398.904191] ? account_guest_time+0x3d0/0x3d0 [ 398.908662] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 398.914177] ? hrtimer_run_queues+0x70/0x300 [ 398.918564] ? run_local_timers+0x168/0x1d0 [ 398.922860] ? timer_clear_idle+0x50/0x50 [ 398.926987] ? account_system_time+0x7f/0xb0 [ 398.931373] ? account_process_tick+0x76/0x240 [ 398.935934] update_process_times+0x2d/0x70 [ 398.940235] tick_sched_handle+0xa0/0x180 [ 398.944362] tick_sched_timer+0x42/0x130 [ 398.948402] __hrtimer_run_queues+0x3e3/0x10a0 [ 398.952964] ? tick_sched_do_timer+0x100/0x100 [ 398.957524] ? hrtimer_start_range_ns+0xd10/0xd10 [ 398.962354] ? pvclock_read_flags+0x160/0x160 [ 398.966824] ? kvm_clock_read+0x25/0x30 [ 398.970777] ? kvm_clock_read+0x25/0x30 [ 398.974727] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 398.979720] ? ktime_get_update_offsets_now+0x3a6/0x570 [ 398.985068] ? do_timer+0x50/0x50 [ 398.988498] ? rcu_nmi_exit+0xd7/0x2b0 [ 398.992364] ? do_raw_spin_lock+0xc1/0x200 [ 398.996576] hrtimer_interrupt+0x286/0x650 [ 399.000795] smp_apic_timer_interrupt+0x15d/0x710 [ 399.005615] ? smp_call_function_single_interrupt+0x650/0x650 [ 399.011476] ? _raw_spin_lock+0x32/0x40 [ 399.015450] ? _raw_spin_unlock+0x22/0x30 [ 399.019576] ? handle_edge_irq+0x330/0x870 [ 399.023787] ? task_prio+0x50/0x50 [ 399.027310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.032133] apic_timer_interrupt+0xf/0x20 [ 399.036338] [ 399.038557] RIP: 0010:snd_pcm_stream_unlock_irq+0xb7/0xf0 [ 399.044067] RSP: 0018:ffff88018da4eb60 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 399.051758] RAX: ffff8801b3096100 RBX: 0000000000000000 RCX: 1ffff10036612d33 [ 399.059008] RDX: 0000000000000000 RSI: ffffffff859cb8d0 RDI: ffffffff88b172b8 [ 399.066262] RBP: ffff88018da4eb68 R08: ffff8801b3096978 R09: 0000000000000006 [ 399.073515] R10: ffff8801b3096100 R11: 0000000000000000 R12: 0000000000000004 [ 399.080762] R13: 00000000ffffffe0 R14: ffff8801cfb953c0 R15: ffff8801ce808040 [ 399.088033] ? snd_pcm_stream_unlock_irq+0xb0/0xf0 [ 399.092945] __snd_pcm_lib_xfer+0x739/0x1d10 [ 399.097340] ? print_usage_bug+0xc0/0xc0 [ 399.101376] ? lock_release+0xa10/0xa10 [ 399.105325] ? snd_pcm_hw_rule_noresample_func+0x110/0x110 [ 399.110927] ? dummy_proc_read+0x6e0/0x6e0 [ 399.115140] ? pcm_lib_apply_appl_ptr+0x5a0/0x5a0 [ 399.119964] ? mark_held_locks+0xc9/0x160 [ 399.124089] ? retint_kernel+0x10/0x10 [ 399.127953] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 399.132946] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 399.137680] ? retint_kernel+0x10/0x10 [ 399.141547] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.147065] ? snd_pcm_oss_prepare+0x87/0x1b0 [ 399.151546] snd_pcm_oss_write3+0xe9/0x220 [ 399.155758] snd_pcm_oss_write2+0x34c/0x460 [ 399.160056] ? snd_pcm_oss_write3+0x220/0x220 [ 399.164528] ? find_held_lock+0x36/0x1c0 [ 399.168566] snd_pcm_oss_sync1+0x332/0x5a0 [ 399.172781] ? snd_pcm_oss_write2+0x460/0x460 [ 399.177255] ? kasan_check_read+0x11/0x20 [ 399.181377] ? rcu_is_watching+0x85/0x140 [ 399.185499] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 399.190669] ? wake_up_q+0x100/0x100 [ 399.194363] ? snd_pcm_format_set_silence+0x203/0x540 [ 399.199534] snd_pcm_oss_sync.isra.29+0x790/0x980 [ 399.204353] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 399.208740] ? fsnotify_first_mark+0x330/0x330 [ 399.213309] ? kobject_put+0x8e/0x280 [ 399.217090] snd_pcm_oss_release+0x214/0x290 [ 399.221475] ? snd_pcm_oss_sync.isra.29+0x980/0x980 [ 399.226474] __fput+0x34d/0x890 [ 399.229739] ? fput+0x1a0/0x1a0 [ 399.232994] ? check_same_owner+0x320/0x320 [ 399.237295] ? _raw_spin_unlock_irq+0x27/0x70 [ 399.241768] ____fput+0x15/0x20 [ 399.245032] task_work_run+0x1e4/0x290 [ 399.248899] ? task_work_cancel+0x240/0x240 [ 399.253198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.258711] ? switch_task_namespaces+0xa2/0xd0 [ 399.263365] do_exit+0x1aee/0x2730 [ 399.266891] ? mm_update_next_owner+0x980/0x980 [ 399.271536] ? print_usage_bug+0xc0/0xc0 [ 399.275572] ? graph_lock+0x170/0x170 [ 399.279357] ? do_raw_spin_unlock+0x9e/0x2e0 [ 399.283742] ? rcu_note_context_switch+0x710/0x710 [ 399.288647] ? lock_acquire+0x1dc/0x520 [ 399.292599] ? __might_sleep+0x95/0x190 [ 399.296552] ? __lock_acquire+0x7f5/0x5130 [ 399.300768] ? debug_check_no_locks_freed+0x310/0x310 [ 399.305933] ? do_raw_spin_unlock+0x9e/0x2e0 [ 399.310316] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 399.314876] ? kasan_check_write+0x14/0x20 [ 399.319089] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 399.324258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.329771] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 399.334848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.340369] ? futex_wait+0x5c1/0x9f0 [ 399.344153] ? perf_trace_lock+0xd6/0x900 [ 399.348278] ? perf_trace_lock_acquire+0xe3/0x980 [ 399.353112] ? zap_class+0x720/0x720 [ 399.356802] ? perf_trace_lock+0x900/0x900 [ 399.361020] ? graph_lock+0x170/0x170 [ 399.364900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.370422] ? graph_lock+0x170/0x170 [ 399.374200] ? perf_event_sync_stat+0x5f0/0x5f0 [ 399.378848] ? memset+0x31/0x40 [ 399.382112] ? find_held_lock+0x36/0x1c0 [ 399.386164] ? lock_downgrade+0x8e0/0x8e0 [ 399.390300] do_group_exit+0x16f/0x430 [ 399.394174] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 399.398738] ? SyS_exit+0x30/0x30 [ 399.402169] ? _raw_spin_unlock_irq+0x27/0x70 [ 399.406642] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 399.411634] get_signal+0x886/0x1960 [ 399.415336] ? ptrace_notify+0x130/0x130 [ 399.419374] ? __schedule+0x80f/0x1e40 [ 399.423251] ? __sched_text_start+0x8/0x8 [ 399.427378] ? find_held_lock+0x36/0x1c0 [ 399.431424] do_signal+0x90/0x2020 [ 399.434942] ? find_held_lock+0x36/0x1c0 [ 399.438990] ? setup_sigcontext+0x7d0/0x7d0 [ 399.443297] ? lock_downgrade+0x8e0/0x8e0 [ 399.447427] ? handle_mm_fault+0x8c0/0xc70 [ 399.451637] ? schedule+0xef/0x430 [ 399.455153] ? handle_mm_fault+0x55a/0xc70 [ 399.459361] ? __schedule+0x1e40/0x1e40 [ 399.463323] ? exit_to_usermode_loop+0x87/0x310 [ 399.467970] exit_to_usermode_loop+0x28a/0x310 [ 399.472530] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 399.477349] ? do_syscall_64+0xb7/0x9d0 [ 399.481301] do_syscall_64+0x792/0x9d0 [ 399.485163] ? vmalloc_sync_all+0x30/0x30 [ 399.489286] ? _raw_spin_unlock_irq+0x27/0x70 [ 399.493758] ? finish_task_switch+0x1ca/0x820 [ 399.498230] ? syscall_return_slowpath+0x5c0/0x5c0 [ 399.503141] ? syscall_return_slowpath+0x30f/0x5c0 [ 399.508051] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 399.513393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.518214] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 399.523380] RIP: 0033:0x4552d9 [ 399.526544] RSP: 002b:00007f90f54d5ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.534227] RAX: fffffffffffffe00 RBX: 000000000072bf80 RCX: 00000000004552d9 [ 399.541471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bf80 [ 399.548718] RBP: 000000000072bf80 R08: 0000000000000000 R09: 000000000072bf58 [ 399.555964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.563209] R13: 00007ffe836f3b1f R14: 00007f90f54d69c0 R15: 0000000000000001