[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.514427] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.460782] random: sshd: uninitialized urandom read (32 bytes read) [ 24.902234] random: sshd: uninitialized urandom read (32 bytes read) [ 25.750632] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. [ 31.284359] random: sshd: uninitialized urandom read (32 bytes read) 2018/04/22 08:57:31 fuzzer started 2018/04/22 08:57:32 dialing manager at 10.128.0.26:42875 [ 55.357912] can: request_module (can-proto-0) failed. [ 55.366873] can: request_module (can-proto-0) failed. 2018/04/22 08:57:57 kcov=true, comps=true 2018/04/22 08:58:01 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(twofish-asm)\x00'}, 0x58) r2 = dup2(r1, r0) r3 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="873a3d2f8a1a4d5211133f7e9c4eb5be", 0x10) sendmsg$can_raw(r3, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000540)=""/188, 0xbc}], 0x3, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/22 08:58:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @broadcast=0xffffffff}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xe, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/22 08:58:01 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r0, &(0x7f0000103fa0)="88", 0x1, 0x0, &(0x7f0000ab9000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000294ff5)={0x0, 0x0, 0x0, 0x3}, 0xb) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000040)=""/102, 0x1d0}, 0x40011ffe) 2018/04/22 08:58:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "12f7bad96ded362bd2e731abf6f34cc2ea8245da29eaf68d792b08517c79507b81303bba8e8aa1f96e9de731"}) 2018/04/22 08:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@bridge_getlink={0x20, 0x12, 0x301, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/129, 0x81}], 0x1) 2018/04/22 08:58:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000000c0)=@ax25={0x3, {"620d1300000097"}}, 0x80) 2018/04/22 08:58:01 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="e9", 0x1, 0xfffffffffffffffb) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000340)) keyctl$invalidate(0x15, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f000076fff4)={@multicast2=0xe0000002}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x19}, 0x100000001}}}, &(0x7f0000000840)=0x8c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000880)={r4, 0x0, 0x10}, &(0x7f00000008c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000004040)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000004080)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x4e24, 0xe5, 0x4e20, 0x800, 0xa, 0xa0, 0x80, 0x2e, r5, r0}, {0xc234, 0xfffffffffffffff9, 0xffffffffffffff8f, 0xffffffffffffff01, 0x5, 0xfffffffffffff001, 0x7, 0x5}, {0x1, 0x6, 0xe7bb, 0x7f}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast=0xffffffff, 0x4d5, 0x3b}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2, 0x5, 0xeaf, 0x5, 0xffffffffffffff7f}}, 0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) keyctl$setperm(0x5, r1, 0x8000008) 2018/04/22 08:58:01 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = dup(r0) shutdown(r1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) [ 61.396360] IPVS: ftp: loaded support on port[0] = 21 [ 61.405887] IPVS: ftp: loaded support on port[0] = 21 [ 61.458080] IPVS: ftp: loaded support on port[0] = 21 [ 61.458967] IPVS: ftp: loaded support on port[0] = 21 [ 61.489236] IPVS: ftp: loaded support on port[0] = 21 [ 61.495064] IPVS: ftp: loaded support on port[0] = 21 [ 61.504759] IPVS: ftp: loaded support on port[0] = 21 [ 61.529294] IPVS: ftp: loaded support on port[0] = 21 [ 63.562787] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.569312] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.595880] device bridge_slave_0 entered promiscuous mode [ 63.604198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.610643] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.619492] device bridge_slave_0 entered promiscuous mode [ 63.664966] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.671474] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.702942] device bridge_slave_0 entered promiscuous mode [ 63.718720] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.725149] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.743861] device bridge_slave_0 entered promiscuous mode [ 63.752851] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.759308] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.768285] device bridge_slave_1 entered promiscuous mode [ 63.785905] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.792287] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.805581] device bridge_slave_0 entered promiscuous mode [ 63.823183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.829587] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.837269] device bridge_slave_0 entered promiscuous mode [ 63.848714] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.855163] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.873195] device bridge_slave_1 entered promiscuous mode [ 63.882464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.889571] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.895943] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.903853] device bridge_slave_0 entered promiscuous mode [ 63.911968] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.918357] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.927848] device bridge_slave_1 entered promiscuous mode [ 63.941956] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.948380] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.962682] device bridge_slave_1 entered promiscuous mode [ 63.975606] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.981987] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.996124] device bridge_slave_1 entered promiscuous mode [ 64.004979] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.011412] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.031215] device bridge_slave_0 entered promiscuous mode [ 64.038721] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.045173] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.053753] device bridge_slave_1 entered promiscuous mode [ 64.061078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.069789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.077601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.085495] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.091900] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.116630] device bridge_slave_1 entered promiscuous mode [ 64.142747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.150745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.161155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.167609] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.199377] device bridge_slave_1 entered promiscuous mode [ 64.216112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.231715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.239213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.248855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.262152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.269682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.338460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.375871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.417384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.460810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.507135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.576417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.631008] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.656406] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.678179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.710239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.738594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.751197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.800004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.811076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.857514] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.868636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.875621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.894604] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.909114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.927243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.934185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.947631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.954752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.973835] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.989287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.996259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.013438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.021997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.029051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.055368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.064999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.071998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.101600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.129563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.140218] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.156625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.173540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.192673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.225075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.237811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.272760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.281125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.296335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.303256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.323165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.347898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.393255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.400148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.436595] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.457343] team0: Port device team_slave_0 added [ 65.471493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.478976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.503153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.511570] team0: Port device team_slave_0 added [ 65.553191] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.574195] team0: Port device team_slave_1 added [ 65.587667] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.596853] team0: Port device team_slave_0 added [ 65.627467] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.642414] team0: Port device team_slave_0 added [ 65.660969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.674941] team0: Port device team_slave_1 added [ 65.688892] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.708755] team0: Port device team_slave_0 added [ 65.714606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.724158] team0: Port device team_slave_0 added [ 65.734933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.762092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.796979] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.804543] team0: Port device team_slave_1 added [ 65.809985] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.817402] team0: Port device team_slave_0 added [ 65.837927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.863512] team0: Port device team_slave_1 added [ 65.872221] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.896440] team0: Port device team_slave_1 added [ 65.911504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.920807] team0: Port device team_slave_1 added [ 65.928465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.943963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.958871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.969997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.978123] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.989188] team0: Port device team_slave_1 added [ 66.003822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.012365] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.029564] team0: Port device team_slave_0 added [ 66.035604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.050697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.065517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.079602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.087374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.095266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.104218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.111254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.119511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.129408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.138061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.147699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.156320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.168367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.175920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.187748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.225521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.240261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.248196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.255819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.263377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.271161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.278819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.286525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.295140] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.302323] team0: Port device team_slave_1 added [ 66.307577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.317980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.326800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.337625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.345187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.352070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.366285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.387485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.409725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.425497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.433376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.440788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.448941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.456448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.464241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.472192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.481089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.492744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.511297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.520046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.536236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.543544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.559621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.588858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.609690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.617912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.625807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.635872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.646364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.656551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.663741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.691710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.705450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.718313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.726564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.734551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.745750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.754635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.767730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.786835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.794168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.802887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.822484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.837174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.849214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.857363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.865263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.872963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.881487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.889244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.898162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.908132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.920050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.931797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.057850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.067121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.084120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.899982] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.906513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.913548] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.919946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.930480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.968152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.097254] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.103703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.110392] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.116775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.160592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.179294] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.185722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.192420] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.198807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.248383] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.255379] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.261778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.268460] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.274849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.286131] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.298409] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.304800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.311447] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.317799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.341296] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.349574] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.355934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.362580] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.368959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.376630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.387861] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.394264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.400942] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.407329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.415344] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.559963] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.566388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.573041] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.579416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.607595] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.024153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.032082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.065850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.080794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.092466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.099493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.106880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.050390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.300773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.320098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.390982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.462523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.482984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.491601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.509212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.568337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.771919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.796636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.840492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.942178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.956271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.962608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.974556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.998217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.009398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.071807] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.273342] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.279574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.290890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.316247] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.322992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.335522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.357420] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.366095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.385342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.473512] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.510796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.517158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.525177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.546250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.555383] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.566444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.580543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.612364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.633442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.650185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.663060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.670566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.795647] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.832949] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.956390] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.989512] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.028070] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.053534] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.093044] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/22 08:58:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, @random="54fd259a39ae"}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000040)="f2ad3e650f3266b8010000000f01c1f4f20f01c90f1753010fc759047d4966b8007000000f23d00f21f86635300000090f23f8360fae59fe", 0x38}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, @random="54fd259a39ae"}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000040)="f2ad3e650f3266b8010000000f01c1f4f20f01c90f1753010fc759047d4966b8007000000f23d00f21f86635300000090f23f8360fae59fe", 0x38}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) 2018/04/22 08:58:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = dup(r0) shutdown(r1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) [ 77.840717] syz-executor6 (6583) used greatest stack depth: 13184 bytes left [ 77.976692] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:18 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x4, 0x1, 0x310000000000000d, r0, &(0x7f0000000000), 0xfe00, 0x10c00}]) 2018/04/22 08:58:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = dup(r0) shutdown(r1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 2018/04/22 08:58:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000fcc000)={0x0, 0x10, &(0x7f0000fcc000)="eb375d06e0aa9f9b211facffffffffff"}) 2018/04/22 08:58:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "12f7bad96ded362bd2e731abf6f34cc2ea8245da29eaf68d792b08517c79507b81303bba8e8aa1f96e9de731"}) 2018/04/22 08:58:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x2000000000f}, [@nested={0x4, 0x7}]}, 0x18}, 0x1}, 0x0) 2018/04/22 08:58:18 executing program 3: r0 = memfd_create(&(0x7f0000000180)="171ea3be32afd6214509f770293dcc47993f51cf92947035e690d118b4fe148b877e313d4afd0fd562198d88cd7c332641e790305f0f656169ea88b03d058063b92fb643", 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b010000e0ffd06e5e3b00000000000000008a00000000d06f"], 0x19) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/22 08:58:18 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x2, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}, 0x1}, 0x0) 2018/04/22 08:58:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) 2018/04/22 08:58:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = dup(r0) shutdown(r1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 2018/04/22 08:58:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "12f7bad96ded362bd2e731abf6f34cc2ea8245da29eaf68d792b08517c79507b81303bba8e8aa1f96e9de731"}) 2018/04/22 08:58:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, @random="54fd259a39ae"}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000040)="f2ad3e650f3266b8010000000f01c1f4f20f01c90f1753010fc759047d4966b8007000000f23d00f21f86635300000090f23f8360fae59fe", 0x38}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:18 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06020000a8430891000000390008000a000500000000001900a307250000000000d374e1b61e32abd0a4df57db81314c00dc1338d54400009b84136ef75afb83de448daa", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) [ 78.378909] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 78.398392] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 78.427187] IPVS: ftp: loaded support on port[0] = 21 [ 78.537921] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 78.553811] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 2018/04/22 08:58:19 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) 2018/04/22 08:58:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) 2018/04/22 08:58:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, @random="54fd259a39ae"}, 0x10) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000040)="f2ad3e650f3266b8010000000f01c1f4f20f01c90f1753010fc759047d4966b8007000000f23d00f21f86635300000090f23f8360fae59fe", 0x38}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "12f7bad96ded362bd2e731abf6f34cc2ea8245da29eaf68d792b08517c79507b81303bba8e8aa1f96e9de731"}) 2018/04/22 08:58:19 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00006adffc), 0x0) 2018/04/22 08:58:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) 2018/04/22 08:58:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000085) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/22 08:58:19 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/22 08:58:19 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x42) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/22 08:58:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000480)=""/140, 0x8c}], 0x2) [ 78.851956] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:19 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/22 08:58:19 executing program 5: getcwd(&(0x7f0000000000), 0x0) 2018/04/22 08:58:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000006e80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="21130000000000000000000000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f00000003c0)="44180c5030827edcf6bf39b97527f6f2", 0x10) readv(r1, &(0x7f0000008180)=[{&(0x7f0000007180)=""/4096, 0x1000}], 0x1) 2018/04/22 08:58:19 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x204000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1000, 0x7, 0x100, 0x0, 0x1ff, 0x57, 0x400, {0x0, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x10001}}, 0x2, 0x6, 0x1ff, 0x2, 0xdef4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) unshare(0x60000000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, {0x2}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}}) 2018/04/22 08:58:19 executing program 5: getcwd(&(0x7f0000000000), 0x0) [ 79.101012] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 2018/04/22 08:58:20 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) readv(r1, &(0x7f0000002440)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000002380)=""/154, 0x9a}], 0x2) 2018/04/22 08:58:20 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000085) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/22 08:58:20 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/22 08:58:20 executing program 5: getcwd(&(0x7f0000000000), 0x0) 2018/04/22 08:58:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000c0dffc), 0x4) 2018/04/22 08:58:20 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) 2018/04/22 08:58:20 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x204000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1000, 0x7, 0x100, 0x0, 0x1ff, 0x57, 0x400, {0x0, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x10001}}, 0x2, 0x6, 0x1ff, 0x2, 0xdef4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) unshare(0x60000000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, {0x2}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}}) 2018/04/22 08:58:20 executing program 5: getcwd(&(0x7f0000000000), 0x0) [ 79.766242] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:20 executing program 2: r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) readv(r0, &(0x7f000003f000)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x2) [ 79.810507] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000c09fc8)={0x0, 0x0, &(0x7f0000f6d000)=[{&(0x7f0000087000)="bb9bb81d3bbfd81ded997a2e26c1292cc2966ed7f1c3512c8222fed992afc0", 0x1f}], 0x1, &(0x7f0000bb0000)}, 0x0) 2018/04/22 08:58:20 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/22 08:58:20 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000000280), 0x0) 2018/04/22 08:58:20 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x1) 2018/04/22 08:58:20 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x204000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1000, 0x7, 0x100, 0x0, 0x1ff, 0x57, 0x400, {0x0, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x10001}}, 0x2, 0x6, 0x1ff, 0x2, 0xdef4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) unshare(0x60000000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, {0x2}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}}) 2018/04/22 08:58:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000e18000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000d70ff0)={0x1a, 0x0, &(0x7f000079a000)}) 2018/04/22 08:58:20 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x1) [ 80.115867] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/22 08:58:21 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000085) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/22 08:58:21 executing program 3: truncate(&(0x7f0000000380)='./file0\x00', 0x80000000000fd) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f00000000c0)=0x1e, 0x4) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x100000001, 0x158, 0xfffffffffffffe01}, 0xc) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000fe1000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r7, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) write(r5, &(0x7f000059a000)="ed", 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000), 0x8, 0x0, &(0x7f000000d000)="62164b44a5c310af"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f00000003c0)='/vmnet0\x00', 0x8, 0x0) 2018/04/22 08:58:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x1) 2018/04/22 08:58:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0f6fda"], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:21 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x204000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1000, 0x7, 0x100, 0x0, 0x1ff, 0x57, 0x400, {0x0, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x10001}}, 0x2, 0x6, 0x1ff, 0x2, 0xdef4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) unshare(0x60000000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, {0x2}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}}) [ 80.787954] IPVS: ftp: loaded support on port[0] = 21 [ 80.847783] binder: 6815 RLIMIT_NICE not set [ 81.577675] binder: 6812:6815 ioctl 408c5333 200004c0 returned -22 [ 81.588372] binder: BINDER_SET_CONTEXT_MGR already set [ 81.593927] binder: 6812:6815 ioctl c0306201 20004000 returned -14 [ 81.600378] binder: 6812:6828 ioctl 40046207 0 returned -16 [ 81.616456] binder_alloc: binder_alloc_mmap_handler: 6812 20000000-20001000 already mapped failed -16 [ 81.626371] binder: 6812:6828 got new transaction with bad transaction stack, transaction 2 has target 6812:0 [ 81.636607] binder: 6812:6828 transaction failed 29201/-71, size 0-0 line 2875 2018/04/22 08:58:22 executing program 2: r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) readv(r0, &(0x7f000003f000)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x2) 2018/04/22 08:58:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x0, 0x400000000000002, r2}) socket$inet(0x2, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r3, 0x0, 0x2000000002, r2}) 2018/04/22 08:58:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x1) 2018/04/22 08:58:22 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d6fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000), 0x4) 2018/04/22 08:58:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/04/22 08:58:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) write(r0, &(0x7f0000000080), 0x0) 2018/04/22 08:58:22 executing program 3: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f0000292000)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) 2018/04/22 08:58:22 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000085) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 81.689061] binder: send failed reply for transaction 2 to 6812:6828 [ 81.695803] binder: undelivered TRANSACTION_COMPLETE [ 81.701047] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.706521] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.767428] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) 2018/04/22 08:58:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x1d, &(0x7f0000000280), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="0f01c9c4c295be1066ba4000ed66baf80cb8c2b70285ef66bafc0cb000ee260f3266bad00466b8008066efc4e2712be50fc71d000000008fc978c6aa0050000066baf80cb8465c528fef66bafc0cb083ee", 0x51}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:23 executing program 3: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f0000292000)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) 2018/04/22 08:58:23 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x16907e, 0x0) fallocate(r0, 0x8, 0x0, 0x101) 2018/04/22 08:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000002280)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)={[0x38, 0x2c]}, 0x2) 2018/04/22 08:58:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={"690036740500"}) r0 = syz_open_dev$tun(&(0x7f0000408000)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000000)="020000001000000040000d02", 0xc, 0x0) 2018/04/22 08:58:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae7638917388c656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") readv(r0, &(0x7f0000000040)=[{&(0x7f0000d1d000)=""/203, 0xcb}], 0x2) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/158, 0x9e}], 0x4) 2018/04/22 08:58:23 executing program 2: r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) readv(r0, &(0x7f000003f000)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x2) 2018/04/22 08:58:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, &(0x7f00004f0000), 0xfffffffffffffe38, 0x0, &(0x7f0000000100)}) 2018/04/22 08:58:23 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000540), &(0x7f0000000100)=0x4) fstatfs(r0, &(0x7f0000000900)=""/33) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) pwrite64(r1, &(0x7f0000008040)="9a", 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x3ffff, &(0x7f0000000140), &(0x7f0000000480)=0x4) r2 = getpgrp(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x81}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000840)={r3, 0x162d93e1, 0x1ff}, 0x10) ioprio_set$pid(0x1, r2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x80) pkey_alloc(0x0, 0x2) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000940)=0x5) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000880)={0x0, 0x4}) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f00000001c0)=""/195, &(0x7f0000000080)=0x18f) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc\x00', 0x40402, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000040)={0x2, 0x0, [{}, {}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000100)={0x3ff, 0x8d}) sendmsg$nl_generic(r5, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x18, 0x20, 0x109, 0x0, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x800, 0x1000002) sendto$unix(r1, &(0x7f0000000980)="840fcc9412e23f4b216bd1662f17c93c0d8149d27fb12c10d615a72b61547abdff24d66a4f45c2d98d06925faf00000000000000", 0x34, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000680)={{{@in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) sendmsg$unix(r4, &(0x7f00000008c0)={&(0x7f00000004c0)=@abs={0x1}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)="7f5cacf9b7176fc188439706000ca49a03f3c80388310960f9e05fa5", 0x1c}], 0x1, &(0x7f0000000840), 0x0, 0x40040}, 0x4008891) clone(0x40000800, &(0x7f00000002c0)="5cd3bfb9988e23fd12566a79f8559d8c201de42fe1989f534ec8d1d50b9dc4235344367527b8249fd0c9334034767dff094e4debb9bda6ed10a317d3aa6b338f7b4197fc8428fab49ec28a879ac4dc520e22d359a0822d4d6744bf9fcf88a47d3ec4c2c7785c68fc7768", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="0efceafc26931e1b84bcade33eb98cd17af636bb89362ef98ac5556e9a255171e1c2a7ef539e8ee57b391ffd4fcf445531cdeb21621825835dcd3acfd2ae605af9e9a65dbac94f2f4f9238743b9cda6410") 2018/04/22 08:58:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f000015cfd8)={0x0, 0x1000000000001, 0x0, 0x0, "cc450294828d9b0006c7c917d91a496bed9216a6f3af549d6ee1fe23a16ba2a4"}) 2018/04/22 08:58:23 executing program 3: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f0000292000)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) 2018/04/22 08:58:23 executing program 6: recvmsg$netrom(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000002c0)=@ax25={0x3, {"18ffa9143abf2c"}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="12d36057bf8319d47e4013ff6eb48555", 0x10}], 0x1, &(0x7f0000000740)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/22 08:58:23 executing program 0: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000e4fecf)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/22 08:58:23 executing program 4: timerfd_create(0x0, 0x80802) 2018/04/22 08:58:23 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc), 0x0) 2018/04/22 08:58:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 2018/04/22 08:58:23 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x80045432, &(0x7f00000000c0)) 2018/04/22 08:58:23 executing program 4: r0 = socket(0x100000400000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="2400000052001f0014f9f40f010904000200071008000100010000000800000000000000", 0x24) 2018/04/22 08:58:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f000015cfd8)={0x0, 0x1000000000001, 0x0, 0x0, "cc450294828d9b0006c7c917d91a496bed9216a6f3af549d6ee1fe23a16ba2a4"}) 2018/04/22 08:58:24 executing program 3: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f0000292000)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) 2018/04/22 08:58:24 executing program 0: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000e4fecf)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/22 08:58:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x492492492492285}) 2018/04/22 08:58:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(arc4)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) 2018/04/22 08:58:24 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f0000000340)=ANY=[]) syz_fuse_mount(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x8830) 2018/04/22 08:58:24 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f000015cfd8)={0x0, 0x1000000000001, 0x0, 0x0, "cc450294828d9b0006c7c917d91a496bed9216a6f3af549d6ee1fe23a16ba2a4"}) 2018/04/22 08:58:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x68, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}}, &(0x7f0000000180)=0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:24 executing program 2: r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) readv(r0, &(0x7f000003f000)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x2) 2018/04/22 08:58:24 executing program 0: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000e4fecf)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/22 08:58:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000954ff6)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000fc8)={&(0x7f0000238ff8)=@abs, 0x8, &(0x7f0000bd9000), 0x0, &(0x7f00006f3fe8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000), 0x0, &(0x7f000000c000), 0xffffffffffffffde}, 0x0) 2018/04/22 08:58:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000240)='\n', 0x1) 2018/04/22 08:58:24 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f000015cfd8)={0x0, 0x1000000000001, 0x0, 0x0, "cc450294828d9b0006c7c917d91a496bed9216a6f3af549d6ee1fe23a16ba2a4"}) 2018/04/22 08:58:24 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00002d7000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000dddf38)={0x1, 0x0, [{0xfffffffffffffffe, 0x0, &(0x7f00005f8000)}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00007a3000)=0x4000000) 2018/04/22 08:58:24 executing program 0: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000e4fecf)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/22 08:58:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000100)=""/196) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) mlock2(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) 2018/04/22 08:58:24 executing program 6: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00008d8000)=[{0x3, 0xcfdc}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) 2018/04/22 08:58:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ff1)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000006fa8)={{0x50f, 0xa0000001}, 0x1, 0x3}) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000180)) sendmsg$nl_generic(r1, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20005}, 0xc, &(0x7f00000013c0)={&(0x7f0000000100)={0x1054, 0x3e, 0xf00, 0x70bd2a, 0x25dfdbfd, {0x13}, [@generic="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", @typed={0x4, 0x18}, @generic="59cb2dbe118cd5b63566e25c427f219c092d598c70f3cc1d693b647f188cf22c8ef516d4b621bec3c6aae9aab7c3b88b3601d9da3eb40c798173"]}, 0x1054}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2018/04/22 08:58:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x28, 0x14, 0xb, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfeffffff, r1}, [@IFA_ADDRESS={0x8, 0x1, @loopback=0x7f000001}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x28}, 0x1}, 0x0) 2018/04/22 08:58:24 executing program 7: unshare(0x20020000) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000000040)='.', &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0xff8f, &(0x7f0000000200)) r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/111, 0x6f}, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 2018/04/22 08:58:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/04/22 08:58:24 executing program 3: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f000031aff8)) 2018/04/22 08:58:24 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x2082) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000940)=0x2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000980)={r2, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x84) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000f9bffc)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a40)={0x0, 0x6, 0x30, 0xfffffffffffffc01, 0x10001}, &(0x7f0000000b00)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000b40)={r3, 0x8, 0x30, 0x29, 0x5}, &(0x7f0000000b80)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000bc0)={r4, 0x1, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000ed5fe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x7f8}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r5, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000740)=0x98) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000c40)={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x307, @random="b3fb91bf08ed"}, 0x10, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth1_to_bridge\x00'}) creat(&(0x7f0000000840)='./file0\x00', 0x52) bind$netrom(r1, &(0x7f0000000c00)=@ax25={0x3, {"e370534980e8c5"}, 0x3}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000a80)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x301000) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000ac0)=0x2, 0x4) [ 84.311486] device bridge0 entered promiscuous mode [ 84.400722] device bridge0 left promiscuous mode 2018/04/22 08:58:25 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6ce}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000001c0)=0x8, 0x4) 2018/04/22 08:58:25 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0), 0x4) 2018/04/22 08:58:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x800cd}) 2018/04/22 08:58:25 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40005, 0x0) fallocate(r0, 0x10, 0x10d800, 0xfaa000) 2018/04/22 08:58:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v3') 2018/04/22 08:58:25 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000afdf)={0x28, 0x2, 0x0, @fuse_notify_store_out}, 0x28) 2018/04/22 08:58:25 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000fb7000)={0x73, 0x79, 0x7a}) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000000c0)={0x1000, 0x4, [0x7fffffff]}) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x4013}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000c97ff8)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 2018/04/22 08:58:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f0000eeafd7)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl(r0, 0x2275, &(0x7f00007bc000)) 2018/04/22 08:58:26 executing program 5: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x800000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)) 2018/04/22 08:58:26 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000100), 0xffffffffffffff22) 2018/04/22 08:58:26 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = accept(r0, &(0x7f0000000000)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000280)=0x2c) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getstats={0x14, 0x5e}, 0x14}, 0x1}, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/22 08:58:26 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40005, 0x0) fallocate(r0, 0x10, 0x10d800, 0xfaa000) [ 85.444512] can: notifier: receive list not found for dev ifb0 2018/04/22 08:58:26 executing program 4: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000f8dfe0)={{&(0x7f00007c3000/0x3000)=nil, 0x3000}}) 2018/04/22 08:58:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f0000eeafd7)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl(r0, 0x2275, &(0x7f00007bc000)) 2018/04/22 08:58:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) 2018/04/22 08:58:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x401000000000127a, &(0x7f0000000380)) 2018/04/22 08:58:26 executing program 5: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, r1+10000000}}, &(0x7f0000000100)) unshare(0x20000400) timerfd_gettime(r0, &(0x7f0000000000)) 2018/04/22 08:58:26 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40005, 0x0) fallocate(r0, 0x10, 0x10d800, 0xfaa000) 2018/04/22 08:58:26 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/22 08:58:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) r1 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/22 08:58:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00001e9ff7)='net/udp6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000723f20)=""/127, 0x2ee}], 0x1, 0x0) 2018/04/22 08:58:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f0000eeafd7)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl(r0, 0x2275, &(0x7f00007bc000)) 2018/04/22 08:58:27 executing program 5: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, r1+10000000}}, &(0x7f0000000100)) unshare(0x20000400) timerfd_gettime(r0, &(0x7f0000000000)) 2018/04/22 08:58:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f0000eeafd7)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl(r0, 0x2275, &(0x7f00007bc000)) 2018/04/22 08:58:27 executing program 6: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x40000b4}) bpf$PROG_LOAD(0x5, &(0x7f000095c000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f000040dff6)='syzkaller\x00', 0x1, 0x29e, &(0x7f000000a000)=""/195}, 0x48) 2018/04/22 08:58:27 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40005, 0x0) fallocate(r0, 0x10, 0x10d800, 0xfaa000) 2018/04/22 08:58:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x401000000000127a, &(0x7f0000000380)) 2018/04/22 08:58:27 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/154, 0x9a) 2018/04/22 08:58:27 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000040)) pipe(&(0x7f0000000140)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x9, 0x95ea}, {0x8, 0x9}, {0x2, 0x8}, {0x0, 0x9}, {0x800, 0x2}, {0x6, 0x8}]}) syz_emit_ethernet(0x1, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x100000000, 0x4, 0x1, 0x40, 0x9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x2, 0x4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x4000000000001, 0x2, &(0x7f0000000080)}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x7695f3cf}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000200)={r5, r6}) 2018/04/22 08:58:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/04/22 08:58:27 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="070000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xf6bf, 0x600) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x100000001, 0x7, 0xffffffffffffffba, 0x8667, 0xffffffffffffff00, 0x4, 0x8000, 0x642, 0x9, 0x9}) 2018/04/22 08:58:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x401000000000127a, &(0x7f0000000380)) 2018/04/22 08:58:27 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0x4) io_setup(0xc12, &(0x7f0000000100)) 2018/04/22 08:58:27 executing program 5: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, r1+10000000}}, &(0x7f0000000100)) unshare(0x20000400) timerfd_gettime(r0, &(0x7f0000000000)) [ 86.634139] netlink: 'syz-executor0': attribute type 21 has an invalid length. 2018/04/22 08:58:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="1f000000160007f2000094ffa4000800000000000081000000000000030004", 0x1f) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000006380)=@nfc, 0x80, &(0x7f0000006700)}}], 0x1, 0x0, &(0x7f00000081c0)) 2018/04/22 08:58:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/04/22 08:58:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 2018/04/22 08:58:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x401000000000127a, &(0x7f0000000380)) 2018/04/22 08:58:27 executing program 5: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, r1+10000000}}, &(0x7f0000000100)) unshare(0x20000400) timerfd_gettime(r0, &(0x7f0000000000)) [ 86.839676] netlink: 'syz-executor0': attribute type 21 has an invalid length. 2018/04/22 08:58:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x82400000085, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0) 2018/04/22 08:58:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17a}]}) 2018/04/22 08:58:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/04/22 08:58:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="1f000000160007f2000094ffa4000800000000000081000000000000030004", 0x1f) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000006380)=@nfc, 0x80, &(0x7f0000006700)}}], 0x1, 0x0, &(0x7f00000081c0)) 2018/04/22 08:58:27 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x46, 0x4) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr}, 0x10, &(0x7f0000001bc0), 0x198, &(0x7f0000000040)}, 0x10}], 0x2, 0x0) 2018/04/22 08:58:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/22 08:58:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) [ 87.199902] netlink: 'syz-executor0': attribute type 21 has an invalid length. 2018/04/22 08:58:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) ppoll(&(0x7f0000000880)=[{r1}, {r0, 0x120}], 0x2, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000000), 0x8) 2018/04/22 08:58:27 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e20}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="a0", 0x1}], 0x1, &(0x7f00000003c0)}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x7e, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6}}}}}}}, &(0x7f00000002c0)) sendmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f00000026c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000002a40)=[{&(0x7f00000029c0)="ba", 0x1}], 0x1}}], 0x1, 0x0) 2018/04/22 08:58:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x82400000085, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0) 2018/04/22 08:58:27 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/04/22 08:58:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="1f000000160007f2000094ffa4000800000000000081000000000000030004", 0x1f) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000006380)=@nfc, 0x80, &(0x7f0000006700)}}], 0x1, 0x0, &(0x7f00000081c0)) 2018/04/22 08:58:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17a}]}) 2018/04/22 08:58:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/04/22 08:58:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) ppoll(&(0x7f0000000880)=[{r1}, {r0, 0x120}], 0x2, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000000), 0x8) [ 87.425710] netlink: 'syz-executor0': attribute type 21 has an invalid length. 2018/04/22 08:58:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000029000)={&(0x7f0000002000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000440)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x2, 0xff}, [@RTA_DST={0x8, 0x1, @local={0xac, 0x14, 0x14, 0xaa}}]}, 0x24}, 0x1}, 0x0) 2018/04/22 08:58:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x82400000085, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0) 2018/04/22 08:58:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="1f000000160007f2000094ffa4000800000000000081000000000000030004", 0x1f) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000006380)=@nfc, 0x80, &(0x7f0000006700)}}], 0x1, 0x0, &(0x7f00000081c0)) 2018/04/22 08:58:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17a}]}) 2018/04/22 08:58:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x2000000004d, 0x0, 0x0) 2018/04/22 08:58:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) ppoll(&(0x7f0000000880)=[{r1}, {r0, 0x120}], 0x2, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000000), 0x8) 2018/04/22 08:58:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000ac0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f00000000c0)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa}, r1}}, 0x30) 2018/04/22 08:58:28 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) read(r0, &(0x7f0000000040)=""/35, 0x23) socket$inet_icmp(0x2, 0x2, 0x1) 2018/04/22 08:58:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) ppoll(&(0x7f0000000880)=[{r1}, {r0, 0x120}], 0x2, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000000), 0x8) 2018/04/22 08:58:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x2000000004d, 0x0, 0x0) 2018/04/22 08:58:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x82400000085, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0) 2018/04/22 08:58:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17a}]}) 2018/04/22 08:58:29 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x2000000004d, 0x0, 0x0) 2018/04/22 08:58:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 2018/04/22 08:58:29 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x2000000004d, 0x0, 0x0) 2018/04/22 08:58:29 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000100), &(0x7f0000a53ffb)=""/5, 0x18, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={"6372633332632d67656e65726963281577b6b57b347800"}}) 2018/04/22 08:58:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x1c42) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff01}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 2018/04/22 08:58:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f0000022000)=[{0x3c}, {0x16}]}) 2018/04/22 08:58:29 executing program 1: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004980)=[{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000038c0)="96cf9436fd2d8e25ed1b8ba7aedefc6b080d7b7c650ff76f2183d68f9fcb43ecf32798d53820af1b4bd2b703dc1ca45a", 0x30}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0xffffff6e}, 0x0) 2018/04/22 08:58:29 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004980)=[{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000038c0)="96cf9436fd2d8e25ed1b8ba7aedefc6b080d7b7c650ff76f2183d68f9fcb43ecf32798d53820af1b4bd2b703dc1ca45a", 0x30}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0xffffff6e}, 0x0) 2018/04/22 08:58:29 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./control/file0\x00') dup2(r0, r1) [ 88.667584] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000f1df23), 0x0, 0xffffffffffffffff, &(0x7f0000fcefd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14}}}}, 0x2e) 2018/04/22 08:58:29 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060df9c)=""/100, 0x64) [ 88.728849] audit: type=1326 audit(1524387509.288:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7290 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455389 code=0x0 [ 88.730353] could not allocate digest TFM handle crc32c-generic(w¶µ{4x [ 88.869127] could not allocate digest TFM handle crc32c-generic(w¶µ{4x 2018/04/22 08:58:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) 2018/04/22 08:58:30 executing program 6: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') pread64(r0, &(0x7f0000000200)=""/8, 0x2000025a, 0x0) 2018/04/22 08:58:30 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/22 08:58:30 executing program 1: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:30 executing program 5: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001200)=""/123, 0x7b}, {&(0x7f0000001280)=""/136, 0x88}], 0x2) 2018/04/22 08:58:30 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/22 08:58:30 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000080)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/145, 0x91}], 0x5, &(0x7f0000001480)=""/166, 0xa6}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) [ 89.675728] IPVS: ftp: loaded support on port[0] = 21 [ 89.694293] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000004c0)=""/179) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='ramfs\x00', 0x0, &(0x7f0000001740)) 2018/04/22 08:58:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0x173, 0x0, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x459) 2018/04/22 08:58:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x4, &(0x7f00000001c0)={0x0, 0x100000000}, &(0x7f0000000240)) 2018/04/22 08:58:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/22 08:58:30 executing program 5: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) [ 90.176186] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x11, &(0x7f0000000100)) 2018/04/22 08:58:31 executing program 6: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1f, @broadcast=0xffffffff}, 0x10) 2018/04/22 08:58:31 executing program 1: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/04/22 08:58:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x7, 0xfffffffffffffffa) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000440)=0x41a, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x5) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0xb1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000e3ff000000000000ffffffff00000000000000006400000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000d75f000000000000000000564a960685f8300a00f038c5bf564bfcb80dc88dddad60797486835357364b200abf278fd1b9f64d288f00000000000000000000"]}, 0x129) socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x306}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) r6 = socket$l2tp(0x18, 0x1, 0x1) socket(0x9, 0x7, 0x10000) socketpair(0x8, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000001c0)=0x90d) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000100)={0x2e2, r8}) r9 = socket$unix(0x1, 0x3, 0x0) connect$l2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/22 08:58:31 executing program 5: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:31 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000426ffc), &(0x7f0000167000)=0x4) 2018/04/22 08:58:31 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/22 08:58:31 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:31 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00008ffff8)={0x0, r1}) ppoll(&(0x7f0000d71fd0)=[{r1}], 0x1, &(0x7f0000f8a000)={0x77359400}, &(0x7f000044aff8), 0x8) write$eventfd(r1, &(0x7f0000f43000), 0x8) [ 90.690571] kernel msg: ebtables bug: please report to author: entries_size too small [ 90.703353] IPVS: ftp: loaded support on port[0] = 21 [ 90.720391] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6={{0xa, 0x4e20}}}, &(0x7f000064b000)=0xa0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x8) 2018/04/22 08:58:31 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x1c) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 90.824684] kernel msg: ebtables bug: please report to author: entries_size too small 2018/04/22 08:58:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 2018/04/22 08:58:31 executing program 2: msgrcv(0x0, &(0x7f00007d4000)={0x0, ""/8}, 0x10, 0x0, 0xfffffffffffffffe) 2018/04/22 08:58:31 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x3) 2018/04/22 08:58:31 executing program 1: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "6970365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/22 08:58:31 executing program 2: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 2018/04/22 08:58:31 executing program 6: r0 = socket$inet(0x2, 0x200000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x1008000000d1, &(0x7f0000000180)=0xfd, 0x4) 2018/04/22 08:58:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x8000026, 0x1ff307543bf68123, 0x0, 0x0, {0x3}, [@nested={0x18, 0x7, [@typed={0x14, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x2c}, 0x1}, 0x0) [ 91.103306] IPVS: ftp: loaded support on port[0] = 21 [ 91.111096] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f000079c000)={&(0x7f0000b91000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20}}}, 0x26, &(0x7f0000003400)=[{&(0x7f0000002400)="fb2ffa0eb237e942700cc26712fa68ce40c22e436246de9c8633865a0f65e7df5ef8a63917a000ebb6aad8ccde08e0533778a0db965f3dea", 0x38}], 0x1, &(0x7f0000017000)}, 0x0) [ 91.198632] netlink: 'syz-executor5': attribute type 7 has an invalid length. 2018/04/22 08:58:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f000079c000)={&(0x7f0000b91000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20}}}, 0x26, &(0x7f0000003400)=[{&(0x7f0000002400)="fb2ffa0eb237e942700cc26712fa68ce40c22e436246de9c8633865a0f65e7df5ef8a63917a000ebb6aad8ccde08e0533778a0db965f3dea", 0x38}], 0x1, &(0x7f0000017000)}, 0x0) 2018/04/22 08:58:31 executing program 5: perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a73000)}, 0x2801}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/22 08:58:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000b5df88)=[{}, {{0x77359400}}], 0x30) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x80000001, 0x20000) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) setrlimit(0xc, &(0x7f0000000100)) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) 2018/04/22 08:58:32 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/22 08:58:32 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/22 08:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:33 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x81) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x45, 0x400000003}], 0x99) 2018/04/22 08:58:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f000079c000)={&(0x7f0000b91000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20}}}, 0x26, &(0x7f0000003400)=[{&(0x7f0000002400)="fb2ffa0eb237e942700cc26712fa68ce40c22e436246de9c8633865a0f65e7df5ef8a63917a000ebb6aad8ccde08e0533778a0db965f3dea", 0x38}], 0x1, &(0x7f0000017000)}, 0x0) 2018/04/22 08:58:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c}}) 2018/04/22 08:58:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x101002) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="224aff19a33530ebcbdd4fd38a60c6a62519721de05a3fb277ccee44fdf414fff2576397e57589723287f4d08d3991d5869c4bb475da66de224e1e3846f61ee06e18cb1ae333f50f75e96bc4f26acc33baed465d80d3a066a108a7ad7c7bbc6a61f6c243ba97c9350940b4a64859f1542175ea873dcbc326cda11c4a37d760aa7fc005a69cdb990a6a0101ad1054404d6f0288f445db52d42786bf96fd058795b0f758047b72cd5b940e9af8909a1765971daed0eb2ee03a672d867abf1d601be2f6cbfa", 0xc4}], 0x1) 2018/04/22 08:58:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000080)=0xfe, 0x4) [ 92.539937] [ 92.541718] ===================================================== [ 92.547942] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 92.554688] 4.17.0-rc1+ #12 Not tainted [ 92.558647] ----------------------------------------------------- [ 92.564876] syz-executor0/7524 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 92.572048] (ptrval) (fs_reclaim){+.+.}, at: fs_reclaim_acquire.part.82+0x0/0x30 [ 92.580289] [ 92.580289] and this task is already holding: [ 92.586247] (ptrval) (&(&dev->event_lock)->rlock){-...}, at: input_inject_event+0xe0/0x3ed [ 92.595357] which would create a new lock dependency: [ 92.600533] (&(&dev->event_lock)->rlock){-...} -> (fs_reclaim){+.+.} [ 92.607562] [ 92.607562] but this new dependency connects a HARDIRQ-irq-safe lock: [ 92.615605] (&(&dev->event_lock)->rlock){-...} [ 92.615619] [ 92.615619] ... which became HARDIRQ-irq-safe at: [ 92.626587] lock_acquire+0x1dc/0x520 [ 92.630473] _raw_spin_lock_irqsave+0x96/0xc0 [ 92.635051] input_event+0x67/0xa0 [ 92.638676] psmouse_report_standard_buttons+0x31/0x90 [ 92.644035] psmouse_process_byte+0x1ef/0x710 [ 92.648610] psmouse_handle_byte+0x4a/0x570 [ 92.653014] psmouse_interrupt+0x38a/0x1420 [ 92.657412] serio_interrupt+0x98/0x160 [ 92.661463] i8042_interrupt+0x385/0x5e0 [ 92.665606] __handle_irq_event_percpu+0x1c0/0xad0 [ 92.670612] handle_irq_event_percpu+0x98/0x1c0 [ 92.675357] handle_irq_event+0xa7/0x135 [ 92.679594] handle_edge_irq+0x20f/0x870 [ 92.683738] handle_irq+0x18c/0x2e7 [ 92.687447] do_IRQ+0x78/0x190 [ 92.690720] ret_from_intr+0x0/0x1e [ 92.694429] update_stack_state+0x7a/0x670 [ 92.698745] __unwind_start+0xf9/0x330 [ 92.702713] __save_stack_trace+0x4a/0xd0 [ 92.706937] save_stack_trace+0x1a/0x20 [ 92.710997] save_stack+0x43/0xd0 [ 92.714528] kasan_kmalloc+0xc4/0xe0 [ 92.718320] kasan_slab_alloc+0x12/0x20 [ 92.722378] kmem_cache_alloc+0x12e/0x760 [ 92.726605] __delayacct_tsk_init+0x20/0x80 [ 92.731006] copy_process.part.38+0x303e/0x6e90 [ 92.735752] _do_fork+0x291/0x12a0 [ 92.739373] kernel_thread+0x34/0x40 [ 92.743167] kthreadd+0x623/0x870 [ 92.746705] ret_from_fork+0x3a/0x50 [ 92.750494] [ 92.750494] to a HARDIRQ-irq-unsafe lock: [ 92.756120] (fs_reclaim){+.+.} [ 92.756130] [ 92.756130] ... which became HARDIRQ-irq-unsafe at: [ 92.765864] ... [ 92.765878] lock_acquire+0x1dc/0x520 [ 92.771612] fs_reclaim_acquire.part.82+0x24/0x30 [ 92.776524] fs_reclaim_acquire+0x14/0x20 [ 92.780748] kmem_cache_alloc_node_trace+0x39/0x770 [ 92.785838] alloc_worker+0xbd/0x2e0 [ 92.789621] init_rescuer.part.25+0x1f/0x190 [ 92.794100] workqueue_init+0x51f/0x7d0 [ 92.798142] kernel_init_freeable+0x2ad/0x58e [ 92.802704] kernel_init+0x11/0x1b3 [ 92.806400] ret_from_fork+0x3a/0x50 [ 92.810173] [ 92.810173] other info that might help us debug this: [ 92.810173] [ 92.818383] Possible interrupt unsafe locking scenario: [ 92.818383] [ 92.825289] CPU0 CPU1 [ 92.829930] ---- ---- [ 92.834571] lock(fs_reclaim); [ 92.837833] local_irq_disable(); [ 92.843863] lock(&(&dev->event_lock)->rlock); [ 92.851031] lock(fs_reclaim); [ 92.856806] [ 92.859537] lock(&(&dev->event_lock)->rlock); [ 92.864361] [ 92.864361] *** DEADLOCK *** [ 92.864361] [ 92.870420] 3 locks held by syz-executor0/7524: [ 92.875063] #0: (ptrval) (&evdev->mutex){+.+.}, at: evdev_write+0x1cc/0x860 [ 92.882937] #1: (ptrval) (&(&dev->event_lock)->rlock){-...}, at: input_inject_event+0xe0/0x3ed [ 92.892457] #2: (ptrval) (rcu_read_lock){....}, at: input_inject_event+0xc5/0x3ed [ 92.900853] [ 92.900853] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 92.909848] -> (&(&dev->event_lock)->rlock){-...} ops: 14 { [ 92.915544] IN-HARDIRQ-W at: [ 92.918806] lock_acquire+0x1dc/0x520 [ 92.924249] _raw_spin_lock_irqsave+0x96/0xc0 [ 92.930375] input_event+0x67/0xa0 [ 92.935545] psmouse_report_standard_buttons+0x31/0x90 [ 92.942450] psmouse_process_byte+0x1ef/0x710 [ 92.948573] psmouse_handle_byte+0x4a/0x570 [ 92.954523] psmouse_interrupt+0x38a/0x1420 [ 92.960485] serio_interrupt+0x98/0x160 [ 92.966098] i8042_interrupt+0x385/0x5e0 [ 92.971788] __handle_irq_event_percpu+0x1c0/0xad0 [ 92.978353] handle_irq_event_percpu+0x98/0x1c0 [ 92.984651] handle_irq_event+0xa7/0x135 [ 92.990348] handle_edge_irq+0x20f/0x870 [ 92.996041] handle_irq+0x18c/0x2e7 [ 93.001295] do_IRQ+0x78/0x190 [ 93.006115] ret_from_intr+0x0/0x1e [ 93.011375] update_stack_state+0x7a/0x670 [ 93.017239] __unwind_start+0xf9/0x330 [ 93.022755] __save_stack_trace+0x4a/0xd0 [ 93.028532] save_stack_trace+0x1a/0x20 [ 93.034136] save_stack+0x43/0xd0 [ 93.039219] kasan_kmalloc+0xc4/0xe0 [ 93.044579] kasan_slab_alloc+0x12/0x20 [ 93.050193] kmem_cache_alloc+0x12e/0x760 [ 93.055969] __delayacct_tsk_init+0x20/0x80 [ 93.061921] copy_process.part.38+0x303e/0x6e90 [ 93.068217] _do_fork+0x291/0x12a0 [ 93.073388] kernel_thread+0x34/0x40 [ 93.078735] kthreadd+0x623/0x870 [ 93.083821] ret_from_fork+0x3a/0x50 [ 93.089159] INITIAL USE at: [ 93.092342] lock_acquire+0x1dc/0x520 [ 93.097694] _raw_spin_lock_irqsave+0x96/0xc0 [ 93.103733] input_inject_event+0xe0/0x3ed [ 93.109518] input_leds_brightness_set+0x81/0xb0 [ 93.115834] led_set_brightness_nopm+0x4c/0xe0 [ 93.121959] led_set_brightness+0x113/0x220 [ 93.127823] led_trigger_event+0x77/0xd0 [ 93.133430] kbd_led_trigger_activate+0xed/0x120 [ 93.139728] led_trigger_set+0x668/0x930 [ 93.145355] led_trigger_set_default+0x10a/0x180 [ 93.151655] of_led_classdev_register+0x485/0x640 [ 93.158055] input_leds_connect+0x410/0x7c0 [ 93.163922] input_attach_handler+0x1b1/0x210 [ 93.169960] input_register_device.cold.22+0xe8/0x297 [ 93.176691] atkbd_connect+0x6fe/0x930 [ 93.182123] serio_connect_driver+0x4f/0x70 [ 93.187988] serio_driver_probe+0x47/0x60 [ 93.193697] driver_probe_device+0x69b/0x960 [ 93.199649] __driver_attach+0x1b2/0x1f0 [ 93.205251] bus_for_each_dev+0x151/0x1d0 [ 93.210951] driver_attach+0x3d/0x50 [ 93.216206] serio_handle_event+0x70a/0xb20 [ 93.222069] process_one_work+0xc1e/0x1b50 [ 93.227847] worker_thread+0x1cc/0x1440 [ 93.233539] kthread+0x345/0x410 [ 93.238448] ret_from_fork+0x3a/0x50 [ 93.243697] } [ 93.245498] ... key at: [] __key.33448+0x0/0x40 [ 93.252225] ... acquired at: [ 93.255318] lock_acquire+0x1dc/0x520 [ 93.259273] fs_reclaim_acquire.part.82+0x24/0x30 [ 93.264266] fs_reclaim_acquire+0x14/0x20 [ 93.268566] __kmalloc+0x45/0x760 [ 93.272171] crng_reseed+0x427/0x920 [ 93.276042] credit_entropy_bits+0x98d/0xa30 [ 93.280603] add_timer_randomness+0x26b/0x320 [ 93.285251] add_input_randomness+0xce/0x3e0 [ 93.289814] input_handle_event+0xb3/0x1210 [ 93.294287] input_inject_event+0x367/0x3ed [ 93.298765] evdev_write+0x4d1/0x860 [ 93.302632] __vfs_write+0x10b/0x960 [ 93.306497] vfs_write+0x1f8/0x560 [ 93.310202] ksys_write+0xf9/0x250 [ 93.313912] __x64_sys_write+0x73/0xb0 [ 93.317955] do_syscall_64+0x1b1/0x800 [ 93.321996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.327350] [ 93.328954] [ 93.328954] the dependencies between the lock to be acquired [ 93.328958] and HARDIRQ-irq-unsafe lock: [ 93.340341] -> (fs_reclaim){+.+.} ops: 1998228 { [ 93.345082] HARDIRQ-ON-W at: [ 93.348346] lock_acquire+0x1dc/0x520 [ 93.353787] fs_reclaim_acquire.part.82+0x24/0x30 [ 93.360259] fs_reclaim_acquire+0x14/0x20 [ 93.366038] kmem_cache_alloc_node_trace+0x39/0x770 [ 93.372685] alloc_worker+0xbd/0x2e0 [ 93.378032] init_rescuer.part.25+0x1f/0x190 [ 93.384073] workqueue_init+0x51f/0x7d0 [ 93.389675] kernel_init_freeable+0x2ad/0x58e [ 93.395798] kernel_init+0x11/0x1b3 [ 93.401063] ret_from_fork+0x3a/0x50 [ 93.406409] SOFTIRQ-ON-W at: [ 93.409670] lock_acquire+0x1dc/0x520 [ 93.415101] fs_reclaim_acquire.part.82+0x24/0x30 [ 93.421582] fs_reclaim_acquire+0x14/0x20 [ 93.427361] kmem_cache_alloc_node_trace+0x39/0x770 [ 93.434006] alloc_worker+0xbd/0x2e0 [ 93.439363] init_rescuer.part.25+0x1f/0x190 [ 93.445400] workqueue_init+0x51f/0x7d0 [ 93.451018] kernel_init_freeable+0x2ad/0x58e [ 93.457146] kernel_init+0x11/0x1b3 [ 93.462400] ret_from_fork+0x3a/0x50 [ 93.467746] INITIAL USE at: [ 93.470921] lock_acquire+0x1dc/0x520 [ 93.476262] fs_reclaim_acquire.part.82+0x24/0x30 [ 93.482646] fs_reclaim_acquire+0x14/0x20 [ 93.488339] kmem_cache_alloc_node_trace+0x39/0x770 [ 93.494898] alloc_worker+0xbd/0x2e0 [ 93.500165] init_rescuer.part.25+0x1f/0x190 [ 93.506114] workqueue_init+0x51f/0x7d0 [ 93.511631] kernel_init_freeable+0x2ad/0x58e [ 93.517678] kernel_init+0x11/0x1b3 [ 93.522845] ret_from_fork+0x3a/0x50 [ 93.528094] } [ 93.529885] ... key at: [] __fs_reclaim_map+0x0/0x40 [ 93.537046] ... acquired at: [ 93.540132] lock_acquire+0x1dc/0x520 [ 93.544088] fs_reclaim_acquire.part.82+0x24/0x30 [ 93.549084] fs_reclaim_acquire+0x14/0x20 [ 93.553386] __kmalloc+0x45/0x760 [ 93.556992] crng_reseed+0x427/0x920 [ 93.560860] credit_entropy_bits+0x98d/0xa30 [ 93.565421] add_timer_randomness+0x26b/0x320 [ 93.570069] add_input_randomness+0xce/0x3e0 [ 93.574633] input_handle_event+0xb3/0x1210 [ 93.579108] input_inject_event+0x367/0x3ed [ 93.583583] evdev_write+0x4d1/0x860 [ 93.587799] __vfs_write+0x10b/0x960 [ 93.591665] vfs_write+0x1f8/0x560 [ 93.595358] ksys_write+0xf9/0x250 [ 93.599050] __x64_sys_write+0x73/0xb0 [ 93.603095] do_syscall_64+0x1b1/0x800 [ 93.607140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.612475] [ 93.614080] [ 93.614080] stack backtrace: [ 93.618560] CPU: 0 PID: 7524 Comm: syz-executor0 Not tainted 4.17.0-rc1+ #12 [ 93.625732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.635063] Call Trace: [ 93.637632] dump_stack+0x1b9/0x294 [ 93.641242] ? dump_stack_print_info.cold.2+0x52/0x52 [ 93.646417] ? print_shortest_lock_dependencies.cold.55+0x1af/0x22a [ 93.652802] ? vprintk_func+0x81/0xe7 [ 93.656585] check_usage.cold.58+0x6d5/0xac7 [ 93.660973] ? is_bpf_text_address+0xae/0x170 [ 93.665453] ? check_usage_forwards+0x3a0/0x3a0 [ 93.670100] ? __bfs+0xa8/0x790 [ 93.673362] ? rcu_is_watching+0x85/0x140 [ 93.677493] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 93.682664] ? lockdep_on+0x50/0x50 [ 93.686274] ? lock_pin_lock+0x350/0x350 [ 93.690319] ? __unwind_start+0x166/0x330 [ 93.694450] ? __kernel_text_address+0xd/0x40 [ 93.698927] ? unwind_get_return_address+0x61/0xa0 [ 93.703838] ? add_lock_to_list.isra.29+0x1e4/0x490 [ 93.708836] __lock_acquire+0x2417/0x5140 [ 93.712965] ? __lock_acquire+0x2417/0x5140 [ 93.717271] ? save_trace+0xe0/0x290 [ 93.720968] ? debug_check_no_locks_freed+0x310/0x310 [ 93.726139] ? debug_check_no_locks_freed+0x310/0x310 [ 93.731313] ? lock_downgrade+0x8e0/0x8e0 [ 93.735445] ? __mix_pool_bytes+0xde/0x400 [ 93.739663] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 93.744228] ? memzero_explicit+0xe/0x10 [ 93.748358] ? extract_buf+0x3a3/0x4c0 [ 93.752226] ? crng_fast_load+0x3b0/0x3b0 [ 93.756357] ? graph_lock+0x170/0x170 [ 93.760138] lock_acquire+0x1dc/0x520 [ 93.763918] ? bad_range+0x160/0x160 [ 93.767612] ? lock_release+0xa10/0xa10 [ 93.771568] ? lock_downgrade+0x8e0/0x8e0 [ 93.775705] ? lock_release+0xa10/0xa10 [ 93.779660] ? lock_downgrade+0x8e0/0x8e0 [ 93.783799] fs_reclaim_acquire.part.82+0x24/0x30 [ 93.788621] ? bad_range+0x160/0x160 [ 93.792317] fs_reclaim_acquire+0x14/0x20 [ 93.796446] __kmalloc+0x45/0x760 [ 93.799878] ? trace_hardirqs_off+0xd/0x10 [ 93.804110] ? _raw_write_unlock_irqrestore+0x63/0xc0 [ 93.809281] ? crng_reseed+0x427/0x920 [ 93.813148] crng_reseed+0x427/0x920 [ 93.816844] ? _extract_entropy.constprop.32+0x150/0x150 [ 93.822281] ? find_held_lock+0x36/0x1c0 [ 93.826326] ? __lock_is_held+0xb5/0x140 [ 93.830368] credit_entropy_bits+0x98d/0xa30 [ 93.834757] ? add_timer_randomness+0x26b/0x320 [ 93.839406] ? crng_reseed+0x920/0x920 [ 93.843278] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 93.848362] ? mix_pool_bytes+0xf7/0x410 [ 93.852404] ? add_timer_randomness+0x12f/0x320 [ 93.857052] ? __bpf_trace_random_read+0x40/0x40 [ 93.861787] ? futex_wake+0x2f6/0x750 [ 93.865568] ? graph_lock+0x170/0x170 [ 93.869349] ? graph_lock+0x170/0x170 [ 93.873129] ? get_futex_key+0x1e90/0x1e90 [ 93.877346] add_timer_randomness+0x26b/0x320 [ 93.881820] ? credit_entropy_bits+0xa30/0xa30 [ 93.886385] add_input_randomness+0xce/0x3e0 [ 93.890774] ? add_timer_randomness+0x320/0x320 [ 93.895421] ? lock_acquire+0x1dc/0x520 [ 93.899380] ? input_inject_event+0xc5/0x3ed [ 93.903775] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 93.908947] input_handle_event+0xb3/0x1210 [ 93.913253] input_inject_event+0x367/0x3ed [ 93.917558] ? input_event+0xa0/0xa0 [ 93.921262] evdev_write+0x4d1/0x860 [ 93.924957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.930304] ? evdev_connect+0x5a0/0x5a0 [ 93.934346] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 93.938909] __vfs_write+0x10b/0x960 [ 93.942604] ? __fget_light+0x2ef/0x430 [ 93.946557] ? evdev_connect+0x5a0/0x5a0 [ 93.950598] ? kernel_read+0x120/0x120 [ 93.954470] ? debug_check_no_obj_freed+0x2ff/0x584 [ 93.959468] ? kasan_check_read+0x11/0x20 [ 93.963595] ? rcu_is_watching+0x85/0x140 [ 93.967723] ? rcu_pm_notify+0xc0/0xc0 [ 93.971590] ? trace_hardirqs_off+0xd/0x10 [ 93.975809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.981329] ? security_file_permission+0x1c6/0x240 [ 93.986325] ? rw_verify_area+0x118/0x360 [ 93.990453] vfs_write+0x1f8/0x560 [ 93.993973] ksys_write+0xf9/0x250 [ 93.997493] ? __ia32_sys_read+0xb0/0xb0 [ 94.001535] __x64_sys_write+0x73/0xb0 [ 94.005414] do_syscall_64+0x1b1/0x800 [ 94.009286] ? syscall_return_slowpath+0x5c0/0x5c0 [ 94.014196] ? syscall_return_slowpath+0x30f/0x5c0 [ 94.019263] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 94.024610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 94.029435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.034605] RIP: 0033:0x455389 [ 94.037875] RSP: 002b:00007efd9ebc2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.045566] RAX: ffffffffffffffda RBX: 00007efd9ebc36d4 RCX: 0000000000455389 [ 94.052816] RDX: 0000000000000099 RSI: 00000000206f7fe8 RDI: 0000000000000013 [ 94.060065] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 94.067317] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 94.074564] R13: 00000000000006cb R14: 00000000006fd3a8 R15: 0000000000000000 [ 94.081839] BUG: sleeping function called from invalid context at mm/slab.h:421 [ 94.089267] in_atomic(): 1, irqs_disabled(): 1, pid: 7524, name: syz-executor0 [ 94.096605] INFO: lockdep is turned off. [ 94.100644] irq event stamp: 208 [ 94.103999] hardirqs last enabled at (207): [] do_syscall_64+0x92/0x800 [ 94.112393] hardirqs last disabled at (208): [] _raw_spin_lock_irqsave+0x74/0xc0 [ 94.121474] softirqs last enabled at (0): [] copy_process.part.38+0x1949/0x6e90 [ 94.130550] softirqs last disabled at (0): [<0000000000000000>] (null) [ 94.138070] CPU: 0 PID: 7524 Comm: syz-executor0 Not tainted 4.17.0-rc1+ #12 [ 94.145238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.154572] Call Trace: [ 94.157145] dump_stack+0x1b9/0x294 [ 94.160759] ? dump_stack_print_info.cold.2+0x52/0x52 [ 94.165946] ? fs_reclaim_acquire+0x20/0x20 [ 94.170260] ___might_sleep.cold.87+0x11f/0x13a [ 94.174916] ? check_same_owner+0x320/0x320 [ 94.179230] ? lock_release+0xa10/0xa10 [ 94.183194] __might_sleep+0x95/0x190 [ 94.186981] __kmalloc+0x2b9/0x760 [ 94.190506] ? trace_hardirqs_off+0xd/0x10 [ 94.194731] ? _raw_write_unlock_irqrestore+0x63/0xc0 [ 94.199907] ? crng_reseed+0x427/0x920 [ 94.203781] crng_reseed+0x427/0x920 [ 94.207484] ? _extract_entropy.constprop.32+0x150/0x150 [ 94.212920] ? find_held_lock+0x36/0x1c0 [ 94.216970] ? __lock_is_held+0xb5/0x140 [ 94.221028] credit_entropy_bits+0x98d/0xa30 [ 94.225423] ? add_timer_randomness+0x26b/0x320 [ 94.230077] ? crng_reseed+0x920/0x920 [ 94.233960] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 94.239049] ? mix_pool_bytes+0xf7/0x410 [ 94.243095] ? add_timer_randomness+0x12f/0x320 [ 94.247750] ? __bpf_trace_random_read+0x40/0x40 [ 94.252490] ? futex_wake+0x2f6/0x750 [ 94.256277] ? graph_lock+0x170/0x170 [ 94.260066] ? graph_lock+0x170/0x170 [ 94.263851] ? get_futex_key+0x1e90/0x1e90 [ 94.268074] add_timer_randomness+0x26b/0x320 [ 94.272554] ? credit_entropy_bits+0xa30/0xa30 [ 94.277129] add_input_randomness+0xce/0x3e0 [ 94.281524] ? add_timer_randomness+0x320/0x320 [ 94.286175] ? lock_acquire+0x1dc/0x520 [ 94.290135] ? input_inject_event+0xc5/0x3ed [ 94.294536] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 94.299721] input_handle_event+0xb3/0x1210 [ 94.304042] input_inject_event+0x367/0x3ed [ 94.308355] ? input_event+0xa0/0xa0 [ 94.312059] evdev_write+0x4d1/0x860 [ 94.315763] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.321112] ? evdev_connect+0x5a0/0x5a0 [ 94.325170] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 94.329738] __vfs_write+0x10b/0x960 [ 94.333437] ? __fget_light+0x2ef/0x430 [ 94.337396] ? evdev_connect+0x5a0/0x5a0 [ 94.341442] ? kernel_read+0x120/0x120 [ 94.345327] ? debug_check_no_obj_freed+0x2ff/0x584 [ 94.350330] ? kasan_check_read+0x11/0x20 [ 94.354464] ? rcu_is_watching+0x85/0x140 [ 94.358596] ? rcu_pm_notify+0xc0/0xc0 [ 94.362467] ? trace_hardirqs_off+0xd/0x10 [ 94.366693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.372225] ? security_file_permission+0x1c6/0x240 [ 94.377232] ? rw_verify_area+0x118/0x360 [ 94.381373] vfs_write+0x1f8/0x560 [ 94.384903] ksys_write+0xf9/0x250 [ 94.388431] ? __ia32_sys_read+0xb0/0xb0 [ 94.392481] __x64_sys_write+0x73/0xb0 [ 94.396357] do_syscall_64+0x1b1/0x800 [ 94.400235] ? syscall_return_slowpath+0x5c0/0x5c0 [ 94.405159] ? syscall_return_slowpath+0x30f/0x5c0 [ 94.410076] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 94.415427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 94.420259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.425431] RIP: 0033:0x455389 [ 94.428605] RSP: 002b:00007efd9ebc2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.436301] RAX: ffffffffffffffda RBX: 00007efd9ebc36d4 RCX: 0000000000455389 2018/04/22 08:58:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xc, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/22 08:58:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x803, 0x440000000000005) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000000180)) r3 = eventfd(0x0) unshare(0x80000) r4 = dup2(r1, r3) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)) socket(0x3, 0x0, 0x83d) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140), 0x8, r3}) r5 = eventfd2(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) epoll_pwait(r6, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x100000000, &(0x7f00000001c0), 0x8) fcntl$setsig(r1, 0xa, 0x24) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, &(0x7f000002d000), 0x0, r5}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r5, 0x4}) 2018/04/22 08:58:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000000040)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\n', 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x93cca066bcd113d5}, 0x98) [ 94.443646] RDX: 0000000000000099 RSI: 00000000206f7fe8 RDI: 0000000000000013 [ 94.450900] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 94.458152] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 94.465405] R13: 00000000000006cb R14: 00000000006fd3a8 R15: 0000000000000000 [ 94.472704] random: crng init done 2018/04/22 08:58:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/04/22 08:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:36 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/22 08:58:36 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f000079c000)={&(0x7f0000b91000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20}}}, 0x26, &(0x7f0000003400)=[{&(0x7f0000002400)="fb2ffa0eb237e942700cc26712fa68ce40c22e436246de9c8633865a0f65e7df5ef8a63917a000ebb6aad8ccde08e0533778a0db965f3dea", 0x38}], 0x1, &(0x7f0000017000)}, 0x0) 2018/04/22 08:58:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 2018/04/22 08:58:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/22 08:58:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x10, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) 2018/04/22 08:58:36 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x40, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f0000000300), 0x18f, &(0x7f0000000340)=""/241, 0xf1}, 0x0) [ 95.350375] sctp: Trying to GSO but underlying device doesn't support it. [ 95.592956] binder: BINDER_SET_CONTEXT_MGR already set [ 95.605335] binder: 7579:7582 ioctl 40046207 0 returned -16 [ 95.627351] binder: release 7579:7580 transaction 5 out, still active [ 95.639061] binder: undelivered TRANSACTION_COMPLETE [ 95.644252] binder: send failed reply for transaction 5, target dead 2018/04/22 08:58:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 2018/04/22 08:58:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x10, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) 2018/04/22 08:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xc011, r3, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="03"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:36 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)=@nfc, 0x2cc, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108, 0xfce4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164, 0x109}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) 2018/04/22 08:58:36 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x6) 2018/04/22 08:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) 2018/04/22 08:58:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/04/22 08:58:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @random="3b5f09814edc"}, 0xffffffffffffffff, {0x2}, "00ffffffffffffff00"}) socket$inet_icmp(0x2, 0x2, 0x1) 2018/04/22 08:58:36 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x4, 0x2b, 0x3}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fc9fe0)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='=', &(0x7f0000000080)=""/246}, 0x18) 2018/04/22 08:58:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 2018/04/22 08:58:36 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000640)=r1) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000540)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x4081) prctl$void(0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000480)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x0, r1}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x0, 0x4, 0x0, 0x4}, {0x2, 0x80, 0x3, 0x3f}, {0x0, 0x1, 0x2b58d827}, {0x100, 0x2, 0x3, 0x400}, {0x4, 0x7ff, 0x3}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a004e24070000000000000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020800000a004e2369030000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5c000000a57a9e8bedad67a72b07b64bccd911f48cbc86999601098c62cd7eb8c908000000000000ee4b1f1e408253df570000000000000073da26c161bb3cf40ccc5508fb7fca122bea67717da75a1f0c2aa53c43aa4749e572f7e48ba60000"], &(0x7f0000000000)=0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r4, 0x9, 0x4f, "7feacf47cbb719dc11d66456fcba9232ce4c965b28d477eaff40356f476d67fb97f978139e9082481a5ba90260d9421541c7e4e72907fb9da49b5064df935d2bcd9475287c2034d2de6573776e2d8f"}, 0x57) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x9, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) signalfd4(r3, &(0x7f00000004c0)={0x6}, 0x8, 0x80000) socketpair$inet(0x2, 0x3, 0x7, &(0x7f0000000480)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00003a4000)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) accept4$packet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000280)=""/62, &(0x7f00000002c0)=""/209, &(0x7f00000003c0)=""/63, 0x32761109184b6163}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x840, 0x0) 2018/04/22 08:58:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x10, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) 2018/04/22 08:58:37 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x4, 0x2b, 0x3}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fc9fe0)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='=', &(0x7f0000000080)=""/246}, 0x18) 2018/04/22 08:58:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227e, &(0x7f000040c000)) 2018/04/22 08:58:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 2018/04/22 08:58:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x10, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) 2018/04/22 08:58:37 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x4, 0x2b, 0x3}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fc9fe0)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='=', &(0x7f0000000080)=""/246}, 0x18) 2018/04/22 08:58:37 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000640)=r1) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000540)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x4081) prctl$void(0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000480)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x0, r1}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x0, 0x4, 0x0, 0x4}, {0x2, 0x80, 0x3, 0x3f}, {0x0, 0x1, 0x2b58d827}, {0x100, 0x2, 0x3, 0x400}, {0x4, 0x7ff, 0x3}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a004e24070000000000000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020800000a004e2369030000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5c000000a57a9e8bedad67a72b07b64bccd911f48cbc86999601098c62cd7eb8c908000000000000ee4b1f1e408253df570000000000000073da26c161bb3cf40ccc5508fb7fca122bea67717da75a1f0c2aa53c43aa4749e572f7e48ba60000"], &(0x7f0000000000)=0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r4, 0x9, 0x4f, "7feacf47cbb719dc11d66456fcba9232ce4c965b28d477eaff40356f476d67fb97f978139e9082481a5ba90260d9421541c7e4e72907fb9da49b5064df935d2bcd9475287c2034d2de6573776e2d8f"}, 0x57) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x9, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) signalfd4(r3, &(0x7f00000004c0)={0x6}, 0x8, 0x80000) socketpair$inet(0x2, 0x3, 0x7, &(0x7f0000000480)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00003a4000)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) accept4$packet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000280)=""/62, &(0x7f00000002c0)=""/209, &(0x7f00000003c0)=""/63, 0x32761109184b6163}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x840, 0x0) 2018/04/22 08:58:37 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000100)) 2018/04/22 08:58:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = dup2(r1, r0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, 0x0, 0x0, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x30}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000001340)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/33, 0x21}], 0x2, &(0x7f0000da2000), 0xfffffffffffffee0}, 0x0) 2018/04/22 08:58:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/04/22 08:58:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) syz_emit_ethernet(0x4a, &(0x7f00003a7000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "540300", 0x14, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2018/04/22 08:58:37 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) 2018/04/22 08:58:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0xfffffffffffffffc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000001000)={@broadcast, @remote}, &(0x7f0000012000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/22 08:58:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/250, 0x4d7}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/195, 0xc3}], 0x3, 0x0) 2018/04/22 08:58:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) syz_emit_ethernet(0x4a, &(0x7f00003a7000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "540300", 0x14, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2018/04/22 08:58:38 executing program 2: getgroups(0x1c1, &(0x7f0000762000)) 2018/04/22 08:58:38 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x4, 0x2b, 0x3}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fc9fe0)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='=', &(0x7f0000000080)=""/246}, 0x18) 2018/04/22 08:58:38 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000640)=r1) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000540)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x4081) prctl$void(0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000480)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x0, r1}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x0, 0x4, 0x0, 0x4}, {0x2, 0x80, 0x3, 0x3f}, {0x0, 0x1, 0x2b58d827}, {0x100, 0x2, 0x3, 0x400}, {0x4, 0x7ff, 0x3}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a004e24070000000000000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020800000a004e2369030000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5c000000a57a9e8bedad67a72b07b64bccd911f48cbc86999601098c62cd7eb8c908000000000000ee4b1f1e408253df570000000000000073da26c161bb3cf40ccc5508fb7fca122bea67717da75a1f0c2aa53c43aa4749e572f7e48ba60000"], &(0x7f0000000000)=0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r4, 0x9, 0x4f, "7feacf47cbb719dc11d66456fcba9232ce4c965b28d477eaff40356f476d67fb97f978139e9082481a5ba90260d9421541c7e4e72907fb9da49b5064df935d2bcd9475287c2034d2de6573776e2d8f"}, 0x57) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x9, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) signalfd4(r3, &(0x7f00000004c0)={0x6}, 0x8, 0x80000) socketpair$inet(0x2, 0x3, 0x7, &(0x7f0000000480)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00003a4000)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) accept4$packet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000280)=""/62, &(0x7f00000002c0)=""/209, &(0x7f00000003c0)=""/63, 0x32761109184b6163}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x840, 0x0) 2018/04/22 08:58:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000"}], 0xaaaaaaaaaaaaac0, 0x0, &(0x7f0000000600), 0x100000000000024d) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x3a, 0x0, 0x5}]}) 2018/04/22 08:58:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) syz_emit_ethernet(0x4a, &(0x7f00003a7000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "540300", 0x14, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2018/04/22 08:58:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000f8ffffff"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"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"}) 2018/04/22 08:58:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) 2018/04/22 08:58:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) unshare(0x28020000) unshare(0x20020000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="0fc7f966b93b08000066b8067abe9566ba7854ae4b0f30baf80c66b8c1c6a08c66efbafc0cecbad004b0eceebaa000b8f5ffef66b9800000c00f326635008000000f300f01d1d00f66b94d0200000f3266b9800000c00f326635010000000f30", 0x60}], 0x1, 0x0, &(0x7f0000000000), 0x0) 2018/04/22 08:58:38 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000640)=r1) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000540)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x4081) prctl$void(0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000480)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x0, r1}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x0, 0x4, 0x0, 0x4}, {0x2, 0x80, 0x3, 0x3f}, {0x0, 0x1, 0x2b58d827}, {0x100, 0x2, 0x3, 0x400}, {0x4, 0x7ff, 0x3}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a004e24070000000000000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020800000a004e2369030000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5c000000a57a9e8bedad67a72b07b64bccd911f48cbc86999601098c62cd7eb8c908000000000000ee4b1f1e408253df570000000000000073da26c161bb3cf40ccc5508fb7fca122bea67717da75a1f0c2aa53c43aa4749e572f7e48ba60000"], &(0x7f0000000000)=0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r4, 0x9, 0x4f, "7feacf47cbb719dc11d66456fcba9232ce4c965b28d477eaff40356f476d67fb97f978139e9082481a5ba90260d9421541c7e4e72907fb9da49b5064df935d2bcd9475287c2034d2de6573776e2d8f"}, 0x57) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x9, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) signalfd4(r3, &(0x7f00000004c0)={0x6}, 0x8, 0x80000) socketpair$inet(0x2, 0x3, 0x7, &(0x7f0000000480)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00003a4000)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) accept4$packet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000280)=""/62, &(0x7f00000002c0)=""/209, &(0x7f00000003c0)=""/63, 0x32761109184b6163}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x840, 0x0) 2018/04/22 08:58:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/04/22 08:58:38 executing program 7: syz_emit_ethernet(0x16b, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "563fa2", 0x135, 0x2f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, {[@dstopts={0x0, 0x2, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}, @hopopts={0x0, 0x0, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x0, 0x14, 0x0, 0x0, 0x0, [@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @empty, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6, 0xe2d4c3d9}, @timestamp={0x8, 0xa}, @eol, @exp_fastopen={0xfe, 0x14, 0xf989, "a52e8f04620085865f7cebc2ddb5ccb8"}, @eol, @md5sig={0x13, 0x12, "a36a0e970f0dc209a1812352306b72af"}, @timestamp={0x8, 0xa, 0x7a, 0x2}]}}, {"735d0164d8"}}}}}}}, &(0x7f0000000080)={0x1, 0x3, [0x0, 0x0, 0x0, 0x8000000000]}) 2018/04/22 08:58:38 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000bc1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000f44000)="8ac6101a42bc0331887b74bf7955b93232222977e2afec0319e39c2a5f666ba77d0829df485655cf8108dd072087155292b10c63f08a253ac7526b20738a1f", 0x3f) 2018/04/22 08:58:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) syz_emit_ethernet(0x4a, &(0x7f00003a7000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "540300", 0x14, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2018/04/22 08:58:38 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}}}}, 0x0) 2018/04/22 08:58:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/22 08:58:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000f8ffffff"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"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"}) 2018/04/22 08:58:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x68, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200), 0x233) 2018/04/22 08:58:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000001200)) 2018/04/22 08:58:38 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="360f00d167430f3026660f3881b975d2000066470f3a633c060366440f388088003000002e676566400f388081c65500008f082897c9000fc71cc53318000067440f01fc6766470fc6014b", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) tkill(r0, 0x15) 2018/04/22 08:58:38 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback=0x7f000001}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x32}], 0x10}, 0x0) 2018/04/22 08:58:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/22 08:58:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000f8ffffff"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"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"}) 2018/04/22 08:58:38 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r1, 0x0) 2018/04/22 08:58:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000600)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000f48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}, &(0x7f0000b0a000)=0xb8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000000f68)={0x0, @in6={{0xa, 0x4e20}}}, 0x98) 2018/04/22 08:58:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/22 08:58:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000f8ffffff"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"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"}) 2018/04/22 08:58:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r1, 0x0) 2018/04/22 08:58:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b80)=@broute={'broute\x00', 0x20, 0x3, 0x590, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000040), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'lo\x00', 'syzkaller1\x00', 'lo\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0xb8, 0x130, 0x180, [@limit={'limit\x00', 0x20, {{0x0, 0xde47}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x80, 0x0, "577c7365e8a4ddc0421d955d8cc7b68bfd7fcb93ce1d8d65726e36d9f26062bb6b6a69e24fdd9bb7177fdf0714f0acf056e6f9cc27cbbc6773baa73dec971867"}}}]}, @common=@log={'log\x00', 0x28, {{0x0, "96547d19114a112abc68d3d6c216ab966c665211683741b4b166c6047d14"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x5, 0x0, 0x0, 'bcsh0\x00', 'bridge0\x00', 'nr0\x00', 'vlan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x100, 0x160, 0x1b0, [@helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}, @owner={'owner\x00', 0x18}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}, {{{0x9, 0x0, 0x0, 'vcan0\x00', 'dummy0\x00', 'bpq0\x00', 'eql\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0x1d0}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:printer_device_t:s0\x00'}}}}]}]}, 0x608) 2018/04/22 08:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') close(r0) 2018/04/22 08:58:39 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="360f00d167430f3026660f3881b975d2000066470f3a633c060366440f388088003000002e676566400f388081c65500008f082897c9000fc71cc53318000067440f01fc6766470fc6014b", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) tkill(r0, 0x15) 2018/04/22 08:58:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20}) 2018/04/22 08:58:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/22 08:58:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00001aaff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f0000857fff)='\t', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000d81fd0)=[{0x26, 0x0, 0x0, 0x3fd, @tick, {}, {0x0, 0x3}}], 0x30) 2018/04/22 08:58:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/22 08:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) 2018/04/22 08:58:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r1, 0x0) 2018/04/22 08:58:39 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)}, {&(0x7f00000014c0)=""/228, 0xe4}], 0x2) 2018/04/22 08:58:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r2, &(0x7f0000000000)="16", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2004, 0x11, r2, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 2018/04/22 08:58:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="5f4be9", 0x3}], 0x1, &(0x7f0000000640)}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) 2018/04/22 08:58:40 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000d000)={0xffffffffffffffff, &(0x7f0000005000), &(0x7f0000008fc5)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000000cfe8)={0xffffffffffffffff, &(0x7f0000e10000), &(0x7f0000017000)}, 0x2f) 2018/04/22 08:58:40 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x8, [@generic="b6"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/22 08:58:40 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r1, 0x0) 2018/04/22 08:58:40 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f00000000c0)=@pppol2tp, 0x80, &(0x7f0000000200)=[{&(0x7f0000001700)=""/107, 0x6b}], 0x1, &(0x7f00000003c0)=""/2, 0x2}}], 0x1, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000557fc8)={&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000b03000)=[{&(0x7f00007fd000)='^', 0x1}], 0x1}, 0x0) 2018/04/22 08:58:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/22 08:58:40 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$rdma_cm(r0, &(0x7f0000001e80)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f0000001e40), 0x101, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x38) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time}) 2018/04/22 08:58:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000000080000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000d8a71752f0f641d03c0b07c1a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf1451170291f4f005c4566d1313ad328396949b97dfb2d91bb40134df09ed3b"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001a40)=""/4096) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000d40)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xe94}, {0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x297}, 0x100000001, [0x5, 0xfffffffffffffffc, 0x1, 0x5, 0x5, 0x6, 0x1, 0x34]}, 0x5c) r4 = accept(0xffffffffffffffff, &(0x7f0000000b00)=@alg, &(0x7f0000000b80)=0x80) sendto$ipx(r4, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4", 0x50) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x2ab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, 0x323) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000500)={0x1, 0x9}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) getpeername$inet6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x1c) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2b) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x2000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r6, r7, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000119078ac2314aaac14142b4e204e20000890780000000000000000000000970ea6f5ee54ca02247b67f1f29f5036727cbd1b4c93ea961aa7f9d2c1fcbb822746548932727c2708a89399bc5105b714277970036a3ff95f7df69e1c823dca133782c22601bb9939674f56ce4db6dce3c79a4465a60205ec054c34609034427530dc40f2cdfdd083f236ba6ebfd04b777ba72feaa2715e783f561bcf4b774cd81e2a99d834d0747983f16c43f4fe9a96da84ac17f4f8db14b59b2b871fef55702df30966092bcfa651de8bd7fa6029af17b3b5406beed9d90d91b85db0256b87a7afbbb9cc"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8bc]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xfffffffffffffdb3) 2018/04/22 08:58:40 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="360f00d167430f3026660f3881b975d2000066470f3a633c060366440f388088003000002e676566400f388081c65500008f082897c9000fc71cc53318000067440f01fc6766470fc6014b", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) tkill(r0, 0x15) 2018/04/22 08:58:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000001aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) poll(&(0x7f0000007000)=[{r0}], 0x1, 0x10aef) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/22 08:58:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/22 08:58:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="ce", 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000c7fdc), 0x0) unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)="ff55d36cffb9ffffef", 0x9) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/22 08:58:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(serpent-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) [ 99.969977] IPVS: ftp: loaded support on port[0] = 21 [ 100.062466] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/22 08:58:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000000080000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000d8a71752f0f641d03c0b07c1a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf1451170291f4f005c4566d1313ad328396949b97dfb2d91bb40134df09ed3b"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001a40)=""/4096) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000d40)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xe94}, {0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x297}, 0x100000001, [0x5, 0xfffffffffffffffc, 0x1, 0x5, 0x5, 0x6, 0x1, 0x34]}, 0x5c) r4 = accept(0xffffffffffffffff, &(0x7f0000000b00)=@alg, &(0x7f0000000b80)=0x80) sendto$ipx(r4, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4", 0x50) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x2ab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000800000089146970365f7674693000000000000000006272696467653000000000000000000079616d30e9ff0000000000000000000069705f76746930000000000000000000aaaaaaaaaaaaffffff00ff00aaaaaaaaaabbffff00ffff0000007000000070000000a80000006d90c18fb05211259b00000000000000000000000000000000000000000000001000000000000000d0ffffff00000000feffffff00000000110000001c000000020173797a6b616c6c65723100000000000000000000000000000000000000000000626f6e64300000000000000000000000677265300000000000000000000000005f8e8e51489f0000000000005dbd189918d0ffff00ffff0000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff010000000500000010000000886c6966623000000000000000000000000064756dd8c30059121683aa007ac1cc419c6d79300000000000000000000073797a5f74756e00000000000000100069726c616e3000000000000000000000aaaaaaaaaa17ffffffffffff77d27bbe39eaff00ffff00ff00007000000070000000a0000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff010000001900000014000000ed5e6270713000000000000000000000000073797a"]}, 0x323) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000500)={0x1, 0x9}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) getpeername$inet6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x1c) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2b) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x2000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r6, r7, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000119078ac2314aaac14142b4e204e20000890780000000000000000000000970ea6f5ee54ca02247b67f1f29f5036727cbd1b4c93ea961aa7f9d2c1fcbb822746548932727c2708a89399bc5105b714277970036a3ff95f7df69e1c823dca133782c22601bb9939674f56ce4db6dce3c79a4465a60205ec054c34609034427530dc40f2cdfdd083f236ba6ebfd04b777ba72feaa2715e783f561bcf4b774cd81e2a99d834d0747983f16c43f4fe9a96da84ac17f4f8db14b59b2b871fef55702df30966092bcfa651de8bd7fa6029af17b3b5406beed9d90d91b85db0256b87a7afbbb9cc"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8bc]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xfffffffffffffdb3) 2018/04/22 08:58:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000c7fdc), 0x0) unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)="ff55d36cffb9ffffef", 0x9) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/22 08:58:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="ce", 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:41 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(serpent-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/22 08:58:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x2b8) 2018/04/22 08:58:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x80100) 2018/04/22 08:58:41 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="360f00d167430f3026660f3881b975d2000066470f3a633c060366440f388088003000002e676566400f388081c65500008f082897c9000fc71cc53318000067440f01fc6766470fc6014b", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) tkill(r0, 0x15) 2018/04/22 08:58:41 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(serpent-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) [ 100.911592] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/87, 0x57}], 0x1, &(0x7f00000001c0)=""/11, 0xb}, 0x0) 2018/04/22 08:58:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc05c5340, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/22 08:58:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="ce", 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x2b8) 2018/04/22 08:58:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000000080000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000d8a71752f0f641d03c0b07c1a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf1451170291f4f005c4566d1313ad328396949b97dfb2d91bb40134df09ed3b"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001a40)=""/4096) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000d40)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xe94}, {0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x297}, 0x100000001, [0x5, 0xfffffffffffffffc, 0x1, 0x5, 0x5, 0x6, 0x1, 0x34]}, 0x5c) r4 = accept(0xffffffffffffffff, &(0x7f0000000b00)=@alg, &(0x7f0000000b80)=0x80) sendto$ipx(r4, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4", 0x50) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x2ab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, 0x323) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000500)={0x1, 0x9}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) getpeername$inet6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x1c) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2b) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x2000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r6, r7, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000119078ac2314aaac14142b4e204e20000890780000000000000000000000970ea6f5ee54ca02247b67f1f29f5036727cbd1b4c93ea961aa7f9d2c1fcbb822746548932727c2708a89399bc5105b714277970036a3ff95f7df69e1c823dca133782c22601bb9939674f56ce4db6dce3c79a4465a60205ec054c34609034427530dc40f2cdfdd083f236ba6ebfd04b777ba72feaa2715e783f561bcf4b774cd81e2a99d834d0747983f16c43f4fe9a96da84ac17f4f8db14b59b2b871fef55702df30966092bcfa651de8bd7fa6029af17b3b5406beed9d90d91b85db0256b87a7afbbb9cc"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8bc]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xfffffffffffffdb3) 2018/04/22 08:58:41 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(serpent-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/22 08:58:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x2b8) 2018/04/22 08:58:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/22 08:58:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5380, &(0x7f0000ca7000)) 2018/04/22 08:58:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/04/22 08:58:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="ce", 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000c7fdc), 0x0) unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)="ff55d36cffb9ffffef", 0x9) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/22 08:58:42 executing program 6: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x14, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) 2018/04/22 08:58:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000000080000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000d8a71752f0f641d03c0b07c1a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf1451170291f4f005c4566d1313ad328396949b97dfb2d91bb40134df09ed3b"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001a40)=""/4096) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000d40)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xe94}, {0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x297}, 0x100000001, [0x5, 0xfffffffffffffffc, 0x1, 0x5, 0x5, 0x6, 0x1, 0x34]}, 0x5c) r4 = accept(0xffffffffffffffff, &(0x7f0000000b00)=@alg, &(0x7f0000000b80)=0x80) sendto$ipx(r4, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4", 0x50) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x2ab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, 0x323) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000500)={0x1, 0x9}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) getpeername$inet6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x1c) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2b) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x2000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r6, r7, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000119078ac2314aaac14142b4e204e20000890780000000000000000000000970ea6f5ee54ca02247b67f1f29f5036727cbd1b4c93ea961aa7f9d2c1fcbb822746548932727c2708a89399bc5105b714277970036a3ff95f7df69e1c823dca133782c22601bb9939674f56ce4db6dce3c79a4465a60205ec054c34609034427530dc40f2cdfdd083f236ba6ebfd04b777ba72feaa2715e783f561bcf4b774cd81e2a99d834d0747983f16c43f4fe9a96da84ac17f4f8db14b59b2b871fef55702df30966092bcfa651de8bd7fa6029af17b3b5406beed9d90d91b85db0256b87a7afbbb9cc"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8bc]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xfffffffffffffdb3) 2018/04/22 08:58:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000737000), 0xfffffffffffffef6, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00000006c0)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 2018/04/22 08:58:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/22 08:58:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x2b8) [ 102.077575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.089900] IPVS: ftp: loaded support on port[0] = 21 2018/04/22 08:58:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/22 08:58:42 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d}, 0x101ad, &(0x7f0000000100)={&(0x7f0000000180)=@can={{0x1}, 0x0, 0x0, 0x0, 0x0, "bdd31a234a5fb168"}, 0x48}, 0x1}, 0x0) 2018/04/22 08:58:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000540)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{}, {0xc}], r1, 0x1, 0x1, 0x90}}, 0x20) 2018/04/22 08:58:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1263, 0x6f2000) 2018/04/22 08:58:42 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x2, 0x32, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/04/22 08:58:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x106, 0x0) writev(r0, &(0x7f000036bfd0)=[{&(0x7f0000b51000)="ebb29c2aa804af648d63b2908439b40213", 0x11}], 0x1) read(r0, &(0x7f0000000100)=""/103, 0x67) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000cdf000)={0x7ff}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000566ffc)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a26fec)={0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 2018/04/22 08:58:42 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000021000)="240000001a0025ffff00000418edfc0e0a0b00000004dc0202ffff0e0800100048186be0", 0x24)