INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2018/04/13 18:56:27 fuzzer started 2018/04/13 18:56:28 dialing manager at 10.128.0.26:33379 2018/04/13 18:56:34 kcov=true, comps=false 2018/04/13 18:56:37 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/13 18:56:37 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x19000850}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14}, 0x14}, 0x1}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) 2018/04/13 18:56:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:56:37 executing program 7: r0 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x1}, 0x1c) 2018/04/13 18:56:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000020fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a6008002000000000000000000000010002e00050300000000000000b6821148a730de33a49869c62b2ca654a6613b6aabf35d4c1cbc8d2b0790ed", 0x4c}], 0x1}, 0x0) 2018/04/13 18:56:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1, &(0x7f0000001000)) 2018/04/13 18:56:37 executing program 3: madvise(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x11) 2018/04/13 18:56:37 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) syzkaller login: [ 41.954618] ip (3772) used greatest stack depth: 54672 bytes left [ 42.272615] ip (3805) used greatest stack depth: 54312 bytes left [ 42.381311] ip (3812) used greatest stack depth: 54232 bytes left [ 43.333488] ip (3907) used greatest stack depth: 54200 bytes left [ 43.629380] ip (3929) used greatest stack depth: 53640 bytes left [ 43.653215] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.659716] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.710004] device bridge_slave_0 entered promiscuous mode [ 43.747621] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.754164] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.787950] device bridge_slave_0 entered promiscuous mode [ 43.801444] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.807981] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.824705] device bridge_slave_0 entered promiscuous mode [ 43.832506] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.838974] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.854847] device bridge_slave_0 entered promiscuous mode [ 43.883555] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.890097] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.916991] device bridge_slave_1 entered promiscuous mode [ 43.930381] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.936839] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.958006] device bridge_slave_0 entered promiscuous mode [ 43.982781] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.989223] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.015876] device bridge_slave_0 entered promiscuous mode [ 44.030947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.037419] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.065190] device bridge_slave_1 entered promiscuous mode [ 44.075978] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.082469] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.109095] device bridge_slave_1 entered promiscuous mode [ 44.118734] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.125202] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.134376] device bridge_slave_0 entered promiscuous mode [ 44.144354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.153219] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.159745] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.178504] device bridge_slave_1 entered promiscuous mode [ 44.187494] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.193998] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.214141] device bridge_slave_0 entered promiscuous mode [ 44.237918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.246996] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.253541] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.276109] device bridge_slave_1 entered promiscuous mode [ 44.293067] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.299647] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.328107] device bridge_slave_1 entered promiscuous mode [ 44.337156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.350604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.360264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.367456] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.373966] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.409986] device bridge_slave_1 entered promiscuous mode [ 44.437496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.444914] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.452134] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.476525] device bridge_slave_1 entered promiscuous mode [ 44.485200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.509123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.538960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.597149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.609276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.685740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.695922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.810476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.826790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.875658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.348625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.491989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.533190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.544893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.570888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.613795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.734226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.778556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.788367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.797328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.817365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.852661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.870216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.966421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.072687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.089386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.601250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.770331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.777729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.807646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.839661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.879208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.911355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.984353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.004689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.030591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.054422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.070266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.079941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.101494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.134559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.144800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.152245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.214468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.221728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.236912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.280452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.287653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.299801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.308716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.316178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.323538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.330765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.373817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.404757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.422449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.440135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.455163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.464156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.474180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.486097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.494084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.502967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.510804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.529495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.536953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.563231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.608116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.642949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.684093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.709622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.720787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.728705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.736673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.744754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.769481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.782805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.793621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.800960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.813208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.857601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.895004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.924606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.960758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.970793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.981777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.990153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.147882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.155360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.171766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.769219] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.775745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.782673] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.789157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.830813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.837694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.903347] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.909845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.916736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.923189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.983110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.998100] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.004596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.011455] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.017944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.051514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.065077] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.071777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.078688] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.085182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.101602] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.123257] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.129754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.136644] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.143151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.193480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.209403] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.215891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.222784] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.229264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.297991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.306166] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.312627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.319466] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.325927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.341586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.524100] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.530611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.537457] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.543915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.553457] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.848366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.866194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.896729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.924646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.954713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.976427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.983967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.361687] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.429499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.500286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.557743] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.628548] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.672384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.843685] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.921097] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.210231] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.216541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.227619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.256593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.266696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.287677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.314912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.331390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.361700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.398292] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.404584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.413132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.475864] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.482257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.493012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.522184] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.533110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.552726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.661341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.667636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.679704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.715674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.721969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.733774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.064847] netlink: 'syz-executor4': attribute type 46 has an invalid length. [ 66.072395] netlink: 28 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/13 18:57:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) 2018/04/13 18:57:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) [ 66.152840] netlink: 'syz-executor4': attribute type 46 has an invalid length. [ 66.160378] netlink: 28 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/13 18:57:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/04/13 18:57:04 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0xb) 2018/04/13 18:57:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 18:57:05 executing program 0: 2018/04/13 18:57:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="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", 0x34d, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0x393, 0x0, 0x0, 0xffffffffffffff4e) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000031c0)={&(0x7f0000002c80)={0xe4, 0x0, 0x0, 0x0, 0x0, {0x3}, [{{0x8, 0x1}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x7}}}]}}, {{0x8, 0x1}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0xe4}, 0x1}, 0x1) shutdown(r0, 0x1) 2018/04/13 18:57:05 executing program 7: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7f}, 0x1c) 2018/04/13 18:57:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) 2018/04/13 18:57:05 executing program 1: 2018/04/13 18:57:05 executing program 3: 2018/04/13 18:57:05 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:05 executing program 3: 2018/04/13 18:57:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x24, 0x1) 2018/04/13 18:57:06 executing program 0: 2018/04/13 18:57:06 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) open(&(0x7f0000000180)='./control/file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f00000001c0)='./control\x00') 2018/04/13 18:57:06 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 18:57:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="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", 0x34d, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0x393, 0x0, 0x0, 0xffffffffffffff4e) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000031c0)={&(0x7f0000002c80)={0xe4, 0x0, 0x0, 0x0, 0x0, {0x3}, [{{0x8, 0x1}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x7}}}]}}, {{0x8, 0x1}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0xe4}, 0x1}, 0x1) shutdown(r0, 0x1) 2018/04/13 18:57:06 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:06 executing program 1: 2018/04/13 18:57:06 executing program 1: 2018/04/13 18:57:06 executing program 0: 2018/04/13 18:57:06 executing program 3: 2018/04/13 18:57:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:06 executing program 7: 2018/04/13 18:57:06 executing program 6: 2018/04/13 18:57:06 executing program 1: 2018/04/13 18:57:06 executing program 5: r0 = socket(0x1f, 0x2000000000000005, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x4}}) 2018/04/13 18:57:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0xff, 0x7}, {{0x0, 0x7530}, 0x0, 0x0, 0x7}, {{}, 0x0, 0x8}, {{}, 0x0, 0x1}], 0x60) write$evdev(r0, &(0x7f0000a59000)=[{{}, 0x0, 0x0, 0x7}, {{}, 0x0, 0x8}], 0x30) 2018/04/13 18:57:06 executing program 3: r0 = socket$netlink(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) 2018/04/13 18:57:06 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, &(0x7f0000000000)="f49d918354ceec044f5374c4c47d2b01940ccd47047c3d") 2018/04/13 18:57:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x3e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x401) 2018/04/13 18:57:06 executing program 6: r0 = epoll_create(0x8000) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x4, 0x7fb) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 2018/04/13 18:57:07 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:07 executing program 5: r0 = socket(0x1f, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x3a, 0xd, 0x1, {0x1f, @ah_ip6_spec={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}}, {"0d11", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @hdata="14300a69a5551646b10a6127b6e477b4f08bbcbf35499634a5b913c65f64db6af96c58ee2a88340e0b6c0376ffad74e57e595c5c", {"b777", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}) 2018/04/13 18:57:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xd3, &(0x7f0000002000), 0x3c) 2018/04/13 18:57:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0xd0, &(0x7f00000000c0)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 2018/04/13 18:57:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000f6affd)="cf", 0x1, 0x0, &(0x7f00007dc000)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000a68000)={0x0, @in={{0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f000044fffc)=0xa0) 2018/04/13 18:57:07 executing program 6: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300), 0x4) 2018/04/13 18:57:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 18:57:07 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 2018/04/13 18:57:07 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x7, 0x2}]}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/13 18:57:07 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/04/13 18:57:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 18:57:07 executing program 5: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x1c, &(0x7f0000000000)={0x0, 'ip6_vti0\x00'}, 0x18) 2018/04/13 18:57:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000100)) 2018/04/13 18:57:07 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00003b9fee)='/dev/input/event#\x00', 0xa2bd, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/168) 2018/04/13 18:57:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x874, 0x2b) 2018/04/13 18:57:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) 2018/04/13 18:57:08 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 18:57:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in=@loopback=0x7f000001}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/13 18:57:08 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:08 executing program 6: r0 = socket$kcm(0x2, 0x4000000005, 0x0) sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)='r', 0x1}], 0x1, &(0x7f0000000c80)}, 0x40400c0) 2018/04/13 18:57:08 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff60061"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x8}], {0x95}}, &(0x7f0000002cc0)="73797a6b616c6c657201", 0x7, 0xfde1, &(0x7f00000003c0)=""/187}, 0x48) 2018/04/13 18:57:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x302) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 2018/04/13 18:57:08 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) [ 70.591260] audit: type=1326 audit(1523645828.577:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5958 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='bcsf0\x00') 2018/04/13 18:57:08 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) [ 70.658170] audit: type=1326 audit(1523645828.610:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5958 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:08 executing program 5: r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x81, &(0x7f0000000000)="00040000", 0x4) 2018/04/13 18:57:08 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) [ 70.862558] audit: type=1326 audit(1523645828.861:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5992 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:08 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:08 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) [ 70.958776] audit: type=1326 audit(1523645828.886:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5992 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 [ 71.080592] audit: type=1326 audit(1523645829.079:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6004 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 71.144838] audit: type=1326 audit(1523645829.107:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6004 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:09 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/04/13 18:57:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000340)=""/4096) 2018/04/13 18:57:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:09 executing program 5: r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x6, 0x1b, &(0x7f0000000100)={0x8}, 0xc) 2018/04/13 18:57:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) 2018/04/13 18:57:09 executing program 6: memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1000000000000110) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/13 18:57:09 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:09 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000087000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000b7bf20)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) [ 71.713835] audit: type=1326 audit(1523645829.712:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6020 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:09 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x0, @time}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/13 18:57:09 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)) 2018/04/13 18:57:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f2cfa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x8008000000003, &(0x7f0000871ff8)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 71.791317] audit: type=1326 audit(1523645829.737:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6020 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:09 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000002400)={[0x39, 0x32]}, 0x2) 2018/04/13 18:57:09 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:09 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) 2018/04/13 18:57:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000eaffa7)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000), 0x32) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000080)=""/204, 0xcc, &(0x7f0000000180)=""/178}}, 0x68) [ 71.994483] audit: type=1326 audit(1523645829.993:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6050 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 72.117270] audit: type=1326 audit(1523645830.018:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6050 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:10 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/04/13 18:57:10 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000910000)=""/100, 0x64) 2018/04/13 18:57:10 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000011ff8)='./file0\x00', &(0x7f0000656000)='./file0\x00', &(0x7f0000106ff4)="010080000000006465667d00", 0x1000, &(0x7f0000defffe)) mount(&(0x7f000056cff8)='./file0\x00', &(0x7f0000123000)='./file0\x00', &(0x7f00000001c0)="252605fff7", 0x2000, &(0x7f0000000100)) 2018/04/13 18:57:10 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)) 2018/04/13 18:57:10 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x50}, 0x1}, 0x0) 2018/04/13 18:57:10 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0x10, 0x4, 0x4, 0xa}, 0x356) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100)="1d", &(0x7f0000000000)=""/113}, 0x18) 2018/04/13 18:57:10 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:10 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000840)='.', &(0x7f0000000880)='.', &(0x7f00000008c0)='coda\x00', 0x5018, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 2018/04/13 18:57:10 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)) 2018/04/13 18:57:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x4000000004, 0x10, 0x47fff, 0x0, 0xffffffffffffffff, 0x0, [0x13]}, 0x2c) 2018/04/13 18:57:10 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/04/13 18:57:10 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f0000010ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x305, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d}]}, 0x28}, 0x1}, 0x0) 2018/04/13 18:57:11 executing program 5: r0 = socket$netlink(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x12, &(0x7f00000000c0)=0x2, 0x4) 2018/04/13 18:57:15 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000140)}}, {{&(0x7f0000000e80)=@ipx={0x4, 0x0, 0x0, "85016dfe9b78"}, 0x20000e90, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) 2018/04/13 18:57:15 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:15 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x1100, 0xfffd) 2018/04/13 18:57:15 executing program 1: r0 = socket$netlink(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x49}}) 2018/04/13 18:57:15 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r1, @empty, @rand_addr}, 0xc) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/13 18:57:15 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:15 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80800) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) getresuid(&(0x7f0000000080), &(0x7f0000000400), &(0x7f0000000440)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/13 18:57:15 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) [ 77.371098] kauditd_printk_skb: 4 callbacks suppressed [ 77.371123] audit: type=1326 audit(1523645835.367:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6136 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 77.396103] audit: type=1326 audit(1523645835.369:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6136 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:16 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:16 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a60ff8)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0, 0x7a3948f69c0f3eeb}], 0x1, 0x0) 2018/04/13 18:57:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 18:57:16 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)) 2018/04/13 18:57:16 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup2(r1, r0) 2018/04/13 18:57:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2) write$tun(r0, &(0x7f0000001000), 0x50) 2018/04/13 18:57:16 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000273ff6)='./control\x00', 0x80000c12) readv(r1, &(0x7f0000b25000)=[{&(0x7f0000fb2000)=""/128, 0x80}], 0x1) writev(r0, &(0x7f0000ecc000)=[{&(0x7f00000d9000)="f9", 0x1}], 0x1) [ 78.286376] audit: type=1326 audit(1523645836.285:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6167 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r0+30000000}) 2018/04/13 18:57:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:16 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)) 2018/04/13 18:57:16 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000000040)) [ 78.369584] audit: type=1326 audit(1523645836.307:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6167 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:16 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x2a) 2018/04/13 18:57:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/04/13 18:57:16 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), 0x4) 2018/04/13 18:57:16 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)) 2018/04/13 18:57:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x8}], 0x10}}], 0x2, 0x0) 2018/04/13 18:57:16 executing program 3: r0 = socket(0x0, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) [ 78.728917] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 2018/04/13 18:57:16 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0505350, &(0x7f00000003c0)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x200000000000, 0x1, 0x800, {}, 0x8, 0x3}) 2018/04/13 18:57:16 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 2018/04/13 18:57:16 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}, [], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x431, &(0x7f0000000180)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x5c, &(0x7f0000000000)="db41b2992106b69ad217e1ca19f4", &(0x7f0000000300)=""/92}, 0x28) 2018/04/13 18:57:16 executing program 6: r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r0}) 2018/04/13 18:57:16 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), 0x4) [ 78.904953] mmap: syz-executor1 (6238) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 79.297106] audit: type=1326 audit(1523645837.295:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6197 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 79.321610] audit: type=1326 audit(1523645837.320:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6197 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:17 executing program 3: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:17 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000273ff6)='./control\x00', 0x80000c12) readv(r1, &(0x7f0000b25000)=[{&(0x7f0000fb2000)=""/128, 0x80}], 0x1) writev(r0, &(0x7f0000ecc000)=[{&(0x7f00000d9000)="f9", 0x1}], 0x1) 2018/04/13 18:57:17 executing program 0: r0 = socket(0x1f, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffff7}]}}) 2018/04/13 18:57:17 executing program 6: r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r0}) 2018/04/13 18:57:17 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f000001c000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000001bfd0)="2f0000001d0003fd6d000000000000000add00d8020000001f5f08c9080001000000737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/13 18:57:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:17 executing program 7: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000280)='./file0/file0\x00', r0}, 0x10) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x2012, &(0x7f0000000640)) 2018/04/13 18:57:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:17 executing program 7: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x4008240b, 0xffffffffffffffff) 2018/04/13 18:57:17 executing program 6: r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r0}) 2018/04/13 18:57:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xffffffffffffff3f, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000116ff8)=0x39) shutdown(r0, 0x1) 2018/04/13 18:57:17 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x9) sendfile(r0, r1, &(0x7f0000000100)=0x36, 0x10001) [ 80.718603] audit: type=1326 audit(1523645838.717:23): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6274 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 80.742960] audit: type=1326 audit(1523645838.741:24): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6274 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:19 executing program 2: munmap(&(0x7f0000a00000/0x600000)=nil, 0x600000) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000880)='configfs\x00', 0x0, &(0x7f0000cde000)) 2018/04/13 18:57:19 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x8}, 0x0) 2018/04/13 18:57:19 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:19 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:19 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:19 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x9) sendfile(r0, r1, &(0x7f0000000100)=0x36, 0x10001) 2018/04/13 18:57:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:19 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) 2018/04/13 18:57:19 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000bd4000)={&(0x7f0000d62ff8)=@abs, 0x8, &(0x7f0000e15000), 0x0, &(0x7f0000432fb0)}, 0x0) close(r1) sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000000500), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/13 18:57:19 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000000380)='tmpfs\x00', 0x0, &(0x7f0000000080)="b54cd8ca3f74729b2ef6800bccbfc6014fd799b10d7dc949b5de7dfa891f3502b3b7ad72ea00369f749700155559b56571509e85c2c3e91d5be745310e216b28f83088fca65549774704eeb9174d2c222b0ebdaa6e01") 2018/04/13 18:57:19 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x0, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) [ 81.614295] tmpfs: No value for mount option 'µLØÊ?tr›.ö€ Ì¿ÆO×™± }ÉIµÞ}ú‰5³·­rê' [ 81.655999] tmpfs: No value for mount option 'µLØÊ?tr›.ö€ Ì¿ÆO×™± }ÉIµÞ}ú‰5³·­rê' [ 82.122522] audit: type=1326 audit(1523645840.121:25): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6314 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 82.146916] audit: type=1326 audit(1523645840.145:26): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6314 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:20 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000bd4000)={&(0x7f0000d62ff8)=@abs, 0x8, &(0x7f0000e15000), 0x0, &(0x7f0000432fb0)}, 0x0) close(r1) sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000000500), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/13 18:57:20 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:20 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:20 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:20 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000004000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000940)) r2 = socket$inet(0xa, 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x10d, 0xb, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) prctl$setfpexc(0xc, 0x2) 2018/04/13 18:57:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 18:57:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:20 executing program 4: seccomp(0x0, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:20 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:20 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:20 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000674000)=0x1) recvmmsg(r0, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25, 0x10, &(0x7f00002d3491), 0x0, &(0x7f0000a38000)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000f15ff0)={0x77359400}) sendmsg$kcm(r0, &(0x7f00001c8fc8)={&(0x7f0000b6fff2)=@l2={0x1f}, 0x80, &(0x7f0000d4fff0)=[{&(0x7f0000978000)="ef", 0x1}], 0x1, &(0x7f0000c7c000)}, 0x0) 2018/04/13 18:57:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:20 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x80, &(0x7f0000241ff0), 0x0, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:21 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/04/13 18:57:21 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:21 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:21 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/04/13 18:57:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:21 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) [ 83.541440] audit: type=1326 audit(1523645841.540:27): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6364 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 83.565920] audit: type=1326 audit(1523645841.564:28): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6364 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:21 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000004000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000940)) r2 = socket$inet(0xa, 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x10d, 0xb, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) prctl$setfpexc(0xc, 0x2) 2018/04/13 18:57:21 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x1, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:22 executing program 4: seccomp(0x0, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:22 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/04/13 18:57:22 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 18:57:22 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:22 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000674000)=0x1) recvmmsg(r0, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25, 0x10, &(0x7f00002d3491), 0x0, &(0x7f0000a38000)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000f15ff0)={0x77359400}) sendmsg$kcm(r0, &(0x7f00001c8fc8)={&(0x7f0000b6fff2)=@l2={0x1f}, 0x80, &(0x7f0000d4fff0)=[{&(0x7f0000978000)="ef", 0x1}], 0x1, &(0x7f0000c7c000)}, 0x0) 2018/04/13 18:57:22 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000004000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000940)) r2 = socket$inet(0xa, 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x10d, 0xb, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) prctl$setfpexc(0xc, 0x2) 2018/04/13 18:57:22 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:22 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(0xffffffffffffffff, r0, 0x0) 2018/04/13 18:57:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:22 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}], 0x1, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:22 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 2018/04/13 18:57:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r0, 0xffffffffffffffff, 0x0) 2018/04/13 18:57:22 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}], 0x1, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:22 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)) [ 85.386900] audit: type=1326 audit(1523645843.385:29): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6438 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 85.411476] audit: type=1326 audit(1523645843.410:30): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6438 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:23 executing program 4: seccomp(0x0, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:23 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:23 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)) 2018/04/13 18:57:23 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)={0x9, 0x4, 0xeff, 0x4}, 0x269) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f00000002c0), &(0x7f0000000300), 0x2}, 0x20) 2018/04/13 18:57:23 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:23 executing program 0: semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000000)) 2018/04/13 18:57:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:23 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}], 0x1, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:24 executing program 0: perf_event_open(&(0x7f0000348f88)={0x4000000000002, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) [ 86.806534] audit: type=1326 audit(1523645844.804:31): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6508 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 86.837410] audit: type=1326 audit(1523645844.827:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6508 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:25 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000001c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:25 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)) 2018/04/13 18:57:25 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r0, &(0x7f00008e6fe0)=""/32, 0x25a) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x10000000000032, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f00000002c0)=""/1, 0x1}], 0x10000000000003b0) getdents(r0, &(0x7f0000000000), 0x0) 2018/04/13 18:57:25 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:25 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:25 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r0}, 0x2c) [ 88.209482] audit: type=1326 audit(1523645846.208:33): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6539 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 88.234569] audit: type=1326 audit(1523645846.232:34): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6539 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:26 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:26 executing program 0: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:26 executing program 6: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x1a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0xffffffffffffff81) 2018/04/13 18:57:26 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:26 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:26 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000001c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:26 executing program 7: mq_open(&(0x7f0000000240)='.U\x00', 0x0, 0x0, &(0x7f0000000280)) 2018/04/13 18:57:26 executing program 6: futex(&(0x7f0000000140)=0x2, 0xb, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x0) 2018/04/13 18:57:26 executing program 7: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={0x69, 0x79, 0x7a}, &(0x7f0000000080)='selinux\x00', 0xfffffffffffffffb) 2018/04/13 18:57:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:27 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:27 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)}}], 0x2, 0x3, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:27 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./control\x00', 0xffffffffffffffff, r1) 2018/04/13 18:57:27 executing program 7: io_setup(0x280006, &(0x7f00000004c0)) 2018/04/13 18:57:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:27 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) [ 89.629936] audit: type=1326 audit(1523645847.628:35): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6569 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 89.658562] audit: type=1326 audit(1523645847.653:36): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6569 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:28 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000001c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:28 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:28 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x0, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x108) 2018/04/13 18:57:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:28 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:28 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x188b, &(0x7f0000155000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 2018/04/13 18:57:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/04/13 18:57:28 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xfe06) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffc3, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 2018/04/13 18:57:28 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000bd4aed)={@random="cd5c0b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "ff0703", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff]}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "09aea5", 0x0, 0x0, 0x0, @dev={0xfe, 0x80}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/13 18:57:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:28 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:28 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000b7a000), 0x0) 2018/04/13 18:57:28 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000bd4aed)={@random="cd5c0b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "ff0703", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff]}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "09aea5", 0x0, 0x0, 0x0, @dev={0xfe, 0x80}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/13 18:57:28 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200005c0], 0x0, &(0x7f0000000340), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2018/04/13 18:57:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) [ 91.053095] audit: type=1326 audit(1523645849.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6627 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 91.077844] audit: type=1326 audit(1523645849.076:38): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6627 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:29 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup3(r1, r0, 0x0) 2018/04/13 18:57:29 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/04/13 18:57:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:29 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x0, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:29 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:29 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) 2018/04/13 18:57:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5786e4b8, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_misc(r0, &(0x7f0000000500)={'syz1'}, 0x4) 2018/04/13 18:57:29 executing program 7: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) 2018/04/13 18:57:29 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x1, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/13 18:57:29 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:29 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(0xffffffffffffffff, r0, 0x0) 2018/04/13 18:57:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, &(0x7f0000000080)) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) 2018/04/13 18:57:29 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(0xffffffffffffffff, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvfrom$packet(r0, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, 0xffffffffffffffff, 0x0) [ 92.475766] audit: type=1326 audit(1523645850.474:39): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6693 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 92.500458] audit: type=1326 audit(1523645850.499:40): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6693 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:31 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:31 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x0, &(0x7f0000001340)={0x0, r1+30000000}) 2018/04/13 18:57:31 executing program 7: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='?', 0x1, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/13 18:57:31 executing program 5: r0 = socket(0x1000000000011, 0x80003, 0x8) bind(r0, &(0x7f0000001040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$llc(r0, &(0x7f0000002100)="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", 0xff0, 0x0, 0x0, 0x0) 2018/04/13 18:57:31 executing program 6: mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffff83, 0x0) 2018/04/13 18:57:31 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) 2018/04/13 18:57:31 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:31 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 2018/04/13 18:57:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000005c0)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) write(r2, &(0x7f0000000580)="a3", 0x1) fcntl$setstatus(r0, 0x4, 0x4000) pwrite64(r2, &(0x7f0000000c00)="2a25b18c930bbd8d134f4581cfc35a43fc8ac5baf8ca551b317568acf0d577f4389907725e1f1619392fb96c1f0cd9afa731f6f1609a0ff60ec3566a2ae938cdcbd6d64dfe37a3e06d5ccc5a30b24e0f114053ab05f6ac1b04ca07ab95f3c71520b3c9cdf1bae368919ef6dc9de540104f1f995782e7b01e248b8af8d5090313decfa595fb3d3fb57da72bce1bb4558fc7dea0131472d2fd9ec225d21f7fb1dcc96315f36816415c745ac070eda6713d51541127641cc960b3bb0c82378c9c819a92f138deb1fadf65bc77b0a468a7c82c657e138a5ccd545384e60f9e8cb72e7e8696b84409ad9550003b78cf22b234251e1d547c151f6f9c9e9c5426c1acab284fdc52527b07f88921a91741f58332045e4a054f7003362213011bba10c196ec3ab5947eb312a05e3de279dba88e0d28a8bf08db785615d1eaee0a3c663f53033d8a50d9efe70141dadefdfe8ee359ec349dcd562cf75ca8e4fb608478c8488b9681a7a01c09dd0e4d016663259a453145f37058f6550720a4abcc476f2e3f4aa9b7bd531cbf14bf269a40b4aaf06d60f14c0883d0ba795e911c4ed1f874df405d3e9ba379a23f284501bf19d3ab1822e16af61a3c2529ca70dcd240f080c3b864f8bd93f329209cbb8c710f4ac173748ddc30f8fbad8ea77c1c82ca9cf24be70dff280896f77814aeb1390fec1635ade11ec2f49f6a0230f841eb07e9181ac02aef6823f72a07d5321af6bcc84e3b646701870dd6aa3e819e5245cd6d4c7cde1c94fe51071a3901be2a6a9a2a314ca56b8b877e3c38c55417d9d1018d15542692e696c33096a944f19125527656504f4ca08eae7e8828e14e546e93fc250d7f9dc030d813b90aacee65ca24debcc5d251517971f6383b5276f9f13cdb19d3df39b751906e108f36da10cad8211ed570409a17576212ced71591c429ec78bb44373e4b4027b127d52aec4c001f07861f940844915095a60a30f197b3e0e9ccccecaf5cb1fea4b7c7c14c79b78001d0e351bb7aa544114eab26b3627a135da0431a23d86e37b12a36d34a37361f2bba2a8821149bda94963b3981d0b9c0c9df98c3d486d835fbdf5df1682e9178266a6ed1515384ec57dec3e1b551825849e8cd569fdf3807b510faf94ef7ad743679e15c2f1f5a1e5b6dbde8cdc8f75258b0d23b24cf902bd288c68f8fa8f4b4c23b7243e663abe29f3247e145b7e6ff227ea02b9ef309b67612498a669663162e2a6bc9a210a1db4adc1ead091fdbe575a90088e6cf2c8396967935f0d59acae8427b9e4293c9e783e27925e44c3018752213fa9174063f6353a9b51390530d4564f0e20495773783590bd18b70c5c967931da13ba9609b2da3f30b9754bc4e261a11bf5d07530705c55c728d94e9e6bf4b799a0f0e976558d0754567670c6b81be919023a6a828b00fbc52211c2fabff6c176823c58e3e19bddc3df99aa464d9ebc003b9efc2fe5fc64f39c4a91f123cdece668fe446ae0cf3995053c59c44ccbe76aa8797dbe5955d8c167b1894a0c01d86e18537b55197701c6e22ddb40d870691f0fe196ffb2e0381077b96920dcf836561ac095ad6ea746561d70280353b87e6a1b2acc9b4f4f8b09ccf3303b0920d46ffc7f417bb154b9a4818a3490d321a148b0f650c6448ebae5206f262b01f0fd4623405c36090c8d30a4a37c38769c46eb4893ff38f6745a2fd23a78c791ac401b012dca830423047709caf4e818e39e56e1aac9f99d7801aecfcd430d6210554c910ee7663963ca06d3d66b608bb308c14b26771a9342fe6070a90548427c6f5d0db63cd5a4f8639a99e213b37311e0020acb51523e423eecdd4ad7b8d30a5d7705f6aed67b526879cb37c2a20e21f308ae1342957fcb71a4db2ced8fae510d89982f5ce8c10cb30d74eb238c05beaa5a8f521124ae8d2a99d3fdb9e7ded20ca6677d64e6bda8bf5ea350c0fb8773d55b7b530f5b2b5ad561ab35a5aca1d09dd8681ebb37ec5eef2ff947da839297469751f21127329d23468100ff6a2bd0556395aa090deed0f7b3dfbfba725eb9152bbc6e0e86392d8aa19c23137e60509f00da793f569a1b1cf089387bdbba3868da4c1b4b8f30d60de51907795c32a8ec1cc3d472f363050b50ac1979f18189da3965ddad5f945106184ba6d7f2b2acf", 0x600, 0x60a00) 2018/04/13 18:57:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:31 executing program 6: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000080)=[{}, {0x0, 0xfffffffffffff065}], 0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) 2018/04/13 18:57:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [@sadb_x_sec_ctx={0x3, 0x18, 0x0, 0x0, 0x9, "e83d3d6c2f44ab03e6"}]}, 0x28}, 0x1}, 0x0) [ 93.891347] audit: type=1326 audit(1523645851.889:41): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6752 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 93.915375] audit: type=1326 audit(1523645851.914:42): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6752 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:32 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:32 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:32 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, 0x0}) 2018/04/13 18:57:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0xfe12) sendto$inet(r0, &(0x7f0000000bc0)="1ead7755d47bd6975c78c3765d65736f918745774ce7ce945bfa9268d5eb6deb1fca6318a507beaec853f16e463ba20747330037ef4c09961231f637024afbc06f850dbcffe9890bb1fc7c89ca10a6af35038920fe8dae329e4cc489ed5abce0ab9fbf8ba64aa7f0eb726434dd18b3976d1dfd61b6ba66558ce0d57fd8acc7e36a629d2a865a3853ad85d8d65176c69f350cf73bea4e9f0d9c7eae26956690dea2c9d0a0e94f57c01f7c643ca78f819a28ae070aa400039889f3e25fec01ed47a5a5539494", 0xc5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/13 18:57:32 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) 2018/04/13 18:57:32 executing program 6: r0 = memfd_create(&(0x7f000030d000)="657468312474727573746564776c616e3076626f786e657430747275737465646574683126766d6e65743010757365726e6f6465765d00", 0x0) fallocate(r0, 0x23, 0x0, 0x87db) 2018/04/13 18:57:32 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 2018/04/13 18:57:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:32 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, 0x0}) 2018/04/13 18:57:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000140)='c\x00', &(0x7f0000000100)='/\x00', 0x0, 0x0, &(0x7f0000000180), 0x28020, &(0x7f0000000040)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/13 18:57:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:32 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a5600000000000000000000028000007a0a00ffff0900fd63010c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0xbb, &(0x7f0000000300)=""/187}, 0x48) 2018/04/13 18:57:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) [ 95.287025] audit: type=1326 audit(1523645853.285:43): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6806 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 95.311171] audit: type=1326 audit(1523645853.309:44): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6806 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:33 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:33 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:33 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) sendfile(r1, r0, 0x0, 0x1) tkill(0x0, 0x1000000000016) 2018/04/13 18:57:33 executing program 3: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1}}], 0x2, 0x3, &(0x7f0000001340)={0x0, 0x0}) 2018/04/13 18:57:33 executing program 6: timer_create(0x3, &(0x7f0000001100)={0x0, 0x34, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000001140)) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/13 18:57:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x4002, 0x0) sendfile(r1, r0, 0x0, 0x20000) [ 95.920992] audit: type=1326 audit(1523645853.919:45): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6866 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:34 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00') symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file1\x00') 2018/04/13 18:57:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:34 executing program 3: timer_create(0x800005, &(0x7f0000000000), &(0x7f0000000080)) 2018/04/13 18:57:34 executing program 3: clock_settime(0xa, &(0x7f0000000180)) 2018/04/13 18:57:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0}) recvmmsg(r1, &(0x7f000000a900)=[{{0x0, 0xfffffe67, &(0x7f0000004a00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x3d, 0x0, &(0x7f000000ab80)={r2}) [ 96.709990] audit: type=1326 audit(1523645854.708:46): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6866 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 96.734401] audit: type=1326 audit(1523645854.732:47): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6866 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:35 executing program 5: unshare(0x100) 2018/04/13 18:57:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:35 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:35 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) sendfile(r1, r0, 0x0, 0x1) tkill(0x0, 0x1000000000016) 2018/04/13 18:57:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0], 0x0) arch_prctl(0x2002, &(0x7f0000000000)) 2018/04/13 18:57:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='q', 0x1}], 0x1}, 0x2000c000) accept(r0, &(0x7f0000000140)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0xfffffe47) close(r1) 2018/04/13 18:57:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) [ 97.402153] audit: type=1326 audit(1523645855.400:48): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6908 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x10000000002, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f00000001c0)={0x2000d}) 2018/04/13 18:57:35 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:35 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x10, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000100)=0x54) 2018/04/13 18:57:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='q', 0x1}], 0x1}, 0x2000c000) accept(r0, &(0x7f0000000140)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0xfffffe47) close(r1) 2018/04/13 18:57:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040), 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:35 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:35 executing program 7: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) [ 98.204184] audit: type=1326 audit(1523645856.202:49): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6908 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 98.237693] audit: type=1326 audit(1523645856.227:50): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6908 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45813a code=0x0 2018/04/13 18:57:36 executing program 6: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0xfffffffffffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) dup3(r0, r1, 0x0) 2018/04/13 18:57:36 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) 2018/04/13 18:57:36 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) sendfile(r1, r0, 0x0, 0x1) tkill(0x0, 0x1000000000016) 2018/04/13 18:57:36 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:36 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, 0x0) 2018/04/13 18:57:36 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(0xffffffffffffffff, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:36 executing program 7: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) [ 98.395604] audit: type=1326 audit(1523645856.394:51): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6985 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:36 executing program 7: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x6, 0x400000000000004, 0x9, 0xfffffffffffffff6}, 0x2c) 2018/04/13 18:57:36 executing program 6: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0xfffffffffffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) dup3(r0, r1, 0x0) 2018/04/13 18:57:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(0xffffffffffffffff, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:36 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:36 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:36 executing program 5: syz_mount_image$bfs(&(0x7f0000001440)='bfs\x00', &(0x7f0000001480)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x8000, 0x0) 2018/04/13 18:57:36 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x5, 0x5) 2018/04/13 18:57:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(0xffffffffffffffff, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) [ 99.200150] audit: type=1326 audit(1523645857.198:52): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6985 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:37 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:37 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) 2018/04/13 18:57:37 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_submit(0x0, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:37 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x0, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:37 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/04/13 18:57:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") preadv(r0, &(0x7f0000001780)=[{&(0x7f0000001680)=""/212, 0xd4}], 0x1, 0xffffffff000) 2018/04/13 18:57:37 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x0, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:37 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:37 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = getpgid(0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) tkill(r1, 0x1000000000016) 2018/04/13 18:57:37 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x0, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x0, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:38 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:38 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x0, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:38 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:38 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:38 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000f1dfc0), 0x0, &(0x7f00006f1a36)=[{0x10, 0x0, 0x7}], 0x10}, 0x810) 2018/04/13 18:57:38 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000f1dfc0), 0x0, &(0x7f00006f1a36)=[{0x10, 0x0, 0x7}], 0x10}, 0x810) 2018/04/13 18:57:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x0, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:38 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:38 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:38 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:38 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) [ 100.583352] kauditd_printk_skb: 7 callbacks suppressed [ 100.583376] audit: type=1326 audit(1523645858.578:60): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7128 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 100.608356] audit: type=1326 audit(1523645858.603:61): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7128 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:38 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) pwrite64(r0, &(0x7f0000000300)="88", 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x81, 0x0) sendfile(r1, r0, 0x0, 0x4) sendfile(r0, r0, 0x0, 0xf283d) 2018/04/13 18:57:38 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:38 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r1, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1}]) 2018/04/13 18:57:38 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:38 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:38 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000010000)) 2018/04/13 18:57:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x0, &(0x7f0000010000)) [ 100.903812] audit: type=1326 audit(1523645858.901:62): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7146 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:39 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:39 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ftruncate(0xffffffffffffffff, 0x7fff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r1 = getpgid(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) tkill(r1, 0x1000000000016) [ 100.979094] audit: type=1326 audit(1523645858.927:63): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7146 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:39 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:39 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) [ 101.173211] audit: type=1326 audit(1523645859.168:64): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7170 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:39 executing program 7: r0 = memfd_create(&(0x7f00002ce000)="1a6465762f6b766d00", 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2012, r0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) [ 101.287099] audit: type=1326 audit(1523645859.193:65): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7170 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:39 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:39 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:39 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:39 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:39 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="b3", 0x1}], 0x1) fallocate(r0, 0x11, 0x0, 0x4000003) 2018/04/13 18:57:39 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)="28a7", 0x2, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a}, &(0x7f00003eb000)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000140)="2af29f4abaffa8aba4f58b775bb2b6e9cc3913eda4b7e1a743e0451404f88ef61a5551f5cca618165110413f7abbcb6a2d4b5e43832c8382027598154987778f6872eb13056f11c881b7417247d1c88b6830599f77e2b4a07476eb5669ad2150162ac7a415a45b40998ee0d7f37b414e89f26c31829879cb5b3e563b1ee9d29b0499d31cf93bb4dfdce649e0851c54745d195a3335f7cb336732d13ca0c6f3eed492c37613a3642ff4dac6df4c9361c3aafdefcad8888be691f562240375cb26", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha3-512\x00'}}) 2018/04/13 18:57:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:39 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x8) execve(&(0x7f0000f61ff8)='./file0\x00', &(0x7f0000f86000), &(0x7f0000148ffc)) close(r0) [ 101.602651] audit: type=1326 audit(1523645859.601:66): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7199 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:39 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:39 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) [ 101.695263] audit: type=1326 audit(1523645859.625:67): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7199 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:39 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) setrlimit(0x7, &(0x7f000000f000)) dup(r0) 2018/04/13 18:57:39 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) [ 101.920676] audit: type=1326 audit(1523645859.919:68): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7224 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 [ 101.996664] audit: type=1326 audit(1523645859.944:69): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7224 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=231 compat=0 ip=0x455319 code=0x0 2018/04/13 18:57:40 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000387000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:40 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0xaf01, &(0x7f00001e3000)) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000b28000)={0x0, r0}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r1, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r0}]) 2018/04/13 18:57:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)={0x18, 0x2a, 0x821, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/13 18:57:40 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:40 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2018/04/13 18:57:40 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:40 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:40 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={"626f6e6430000000000000000300", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/04/13 18:57:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:40 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x32}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2004e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/13 18:57:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000080)="c39b821b532af4824225e46c3574587889733e2d647856277228c2a9d1d3099333920572fb49a53c8ff18b4ffa7dd095eb42833224059ecff409972fdae45c3f7f1ffe792830772a40bc57fff7228c9671b6a39476c76c423693c3122f762c3d573f03590d73a5d21abb49af58836c24ddc61d1328bd8b7d3375f23b902b7ce870", 0x81, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:41 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000900)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000019c0)=""/68, 0x44}}], 0x2, 0x0, &(0x7f0000001ac0)={0x0, 0x1c9c380}) 2018/04/13 18:57:41 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) r2 = getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(r2, 0x1000000000016) 2018/04/13 18:57:41 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x32}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2004e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/13 18:57:41 executing program 4: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x407fffff7d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/13 18:57:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00005daff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000b28000)={0x0, r1}) io_setup(0xfff, &(0x7f0000e3cffc)=0x0) io_submit(r2, 0x1, &(0x7f0000127ff4)=[&(0x7f00001bcfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000aa0f89), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/04/13 18:57:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xfd7c) sendto$inet(r0, &(0x7f0000e75000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00008b1000)="d4", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80) r1 = dup2(r0, r0) recvfrom$packet(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000102, 0x0, 0x0) 2018/04/13 18:57:41 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 18:57:41 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) sendto(r1, &(0x7f0000000100)="f6", 0x1, 0x0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/13 18:57:41 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x5, 0x0, &(0x7f0000060ff0)={0x0, 0x3}, &(0x7f0000034000), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 103.823794] ================================================================== [ 103.831245] BUG: KMSAN: uninit-value in crypto_inc+0x2ab/0x2f0 [ 103.837224] CPU: 0 PID: 7314 Comm: syz-executor5 Not tainted 4.16.0+ #83 [ 103.844073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.853429] Call Trace: [ 103.856035] dump_stack+0x185/0x1d0 [ 103.859674] ? crypto_inc+0x2ab/0x2f0 [ 103.863480] kmsan_report+0x142/0x240 [ 103.867293] __msan_warning_32+0x6c/0xb0 [ 103.871364] crypto_inc+0x2ab/0x2f0 [ 103.875010] drbg_ctr_update+0x3a04/0x3d10 [ 103.879276] ? drbg_hash_df+0xc70/0xc70 [ 103.883270] drbg_seed+0xcba/0xe90 [ 103.886827] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 103.892195] ? add_random_ready_callback+0x4c/0x3c0 [ 103.897219] ? __kmalloc+0x23c/0x350 [ 103.900941] ? _cond_resched+0x3c/0xd0 [ 103.904839] ? drbg_kcapi_seed+0x129f/0x2270 [ 103.909266] drbg_kcapi_seed+0x1c97/0x2270 [ 103.913522] ? drbg_kcapi_random+0xc20/0xc20 [ 103.917942] crypto_rng_reset+0x262/0x310 [ 103.922103] rng_setkey+0x8b/0xa0 [ 103.925565] alg_setsockopt+0x6c5/0x740 [ 103.929550] ? rng_release+0x50/0x50 [ 103.933275] ? alg_accept+0xd0/0xd0 [ 103.936912] SYSC_setsockopt+0x4b8/0x570 [ 103.940996] SyS_setsockopt+0x76/0xa0 [ 103.944812] do_syscall_64+0x309/0x430 [ 103.948977] ? SYSC_recv+0xe0/0xe0 [ 103.952533] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 103.957725] RIP: 0033:0x455319 [ 103.960921] RSP: 002b:00007f0295809c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.968639] RAX: ffffffffffffffda RBX: 00007f029580a6d4 RCX: 0000000000455319 [ 103.975999] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 103.983273] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 103.990544] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 103.997827] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 104.005100] [ 104.006731] Uninit was stored to memory at: [ 104.011083] kmsan_internal_chain_origin+0x12b/0x210 [ 104.016192] kmsan_memcpy_origins+0x11d/0x170 [ 104.020682] __msan_memcpy+0x19f/0x1f0 [ 104.024555] drbg_ctr_update+0x393a/0x3d10 [ 104.028786] drbg_seed+0xcba/0xe90 [ 104.032323] drbg_kcapi_seed+0x1c97/0x2270 [ 104.036553] crypto_rng_reset+0x262/0x310 [ 104.040683] rng_setkey+0x8b/0xa0 [ 104.044117] alg_setsockopt+0x6c5/0x740 [ 104.048087] SYSC_setsockopt+0x4b8/0x570 [ 104.052134] SyS_setsockopt+0x76/0xa0 [ 104.055917] do_syscall_64+0x309/0x430 [ 104.059798] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 104.064969] Uninit was stored to memory at: [ 104.069276] kmsan_internal_chain_origin+0x12b/0x210 [ 104.074360] kmsan_memcpy_origins+0x11d/0x170 [ 104.078837] __msan_memcpy+0x19f/0x1f0 [ 104.082711] drbg_kcapi_sym_ctr+0x6e8/0x840 [ 104.087027] drbg_ctr_update+0x349a/0x3d10 [ 104.091264] drbg_seed+0xcba/0xe90 [ 104.094789] drbg_kcapi_seed+0x1c97/0x2270 [ 104.099028] crypto_rng_reset+0x262/0x310 [ 104.103175] rng_setkey+0x8b/0xa0 [ 104.106627] alg_setsockopt+0x6c5/0x740 [ 104.110590] SYSC_setsockopt+0x4b8/0x570 [ 104.114643] SyS_setsockopt+0x76/0xa0 [ 104.118429] do_syscall_64+0x309/0x430 [ 104.122298] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 104.127463] Uninit was created at: [ 104.130989] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 104.136093] kmsan_kmalloc+0x94/0x100 [ 104.139887] __kmalloc+0x23c/0x350 [ 104.143409] drbg_init_sym_kernel+0x8ca/0xcc0 [ 104.147887] drbg_kcapi_seed+0xa5a/0x2270 [ 104.152025] crypto_rng_reset+0x262/0x310 [ 104.156172] rng_setkey+0x8b/0xa0 [ 104.159605] alg_setsockopt+0x6c5/0x740 [ 104.163582] SYSC_setsockopt+0x4b8/0x570 [ 104.167633] SyS_setsockopt+0x76/0xa0 [ 104.171516] do_syscall_64+0x309/0x430 [ 104.175385] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 104.180561] ================================================================== [ 104.187899] Disabling lock debugging due to kernel taint [ 104.193329] Kernel panic - not syncing: panic_on_warn set ... [ 104.193329] [ 104.200676] CPU: 0 PID: 7314 Comm: syz-executor5 Tainted: G B 4.16.0+ #83 [ 104.208795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.218142] Call Trace: [ 104.220720] dump_stack+0x185/0x1d0 [ 104.224351] panic+0x39d/0x940 [ 104.227547] ? crypto_inc+0x2ab/0x2f0 [ 104.231380] kmsan_report+0x238/0x240 [ 104.235164] __msan_warning_32+0x6c/0xb0 [ 104.239217] crypto_inc+0x2ab/0x2f0 [ 104.242840] drbg_ctr_update+0x3a04/0x3d10 [ 104.247093] ? drbg_hash_df+0xc70/0xc70 [ 104.251070] drbg_seed+0xcba/0xe90 [ 104.254608] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 104.259951] ? add_random_ready_callback+0x4c/0x3c0 [ 104.264957] ? __kmalloc+0x23c/0x350 [ 104.268654] ? _cond_resched+0x3c/0xd0 [ 104.272524] ? drbg_kcapi_seed+0x129f/0x2270 [ 104.276915] drbg_kcapi_seed+0x1c97/0x2270 [ 104.281140] ? drbg_kcapi_random+0xc20/0xc20 [ 104.285621] crypto_rng_reset+0x262/0x310 [ 104.289755] rng_setkey+0x8b/0xa0 [ 104.293202] alg_setsockopt+0x6c5/0x740 [ 104.297168] ? rng_release+0x50/0x50 [ 104.300868] ? alg_accept+0xd0/0xd0 [ 104.304480] SYSC_setsockopt+0x4b8/0x570 [ 104.308525] SyS_setsockopt+0x76/0xa0 [ 104.312322] do_syscall_64+0x309/0x430 [ 104.316213] ? SYSC_recv+0xe0/0xe0 [ 104.319748] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 104.324920] RIP: 0033:0x455319 [ 104.328091] RSP: 002b:00007f0295809c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.335779] RAX: ffffffffffffffda RBX: 00007f029580a6d4 RCX: 0000000000455319 [ 104.343036] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 104.352054] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 104.359313] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 104.366565] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 104.374323] Dumping ftrace buffer: [ 104.377854] (ftrace buffer empty) [ 104.381544] Kernel Offset: disabled [ 104.385156] Rebooting in 86400 seconds..