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"]}, 0x2a5) sendmsg$netrom(r2, &(0x7f0000000300)={&(0x7f0000000140)=@ax25={0x3, {"babcc3a81b7f94"}}, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x20044800}, 0x10) writev(r4, &(0x7f00001a5ff0)=[{&(0x7f0000086fa8)="480000001400197f00bb4b01fd0d8c560a880000f217e0020000001d000000a2bc560000000000000200000028213ee206000000000000ffff5bffff001ce1ed5e00000000000000", 0x48}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000580)={r5, 0x8}) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x6, 0x3}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0xb, &(0x7f0000000040), &(0x7f0000000ffc)=0x4) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") r2 = socket(0xa, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r2) connect$unix(r1, &(0x7f0000fa8000)=@abs={0xfffffffffffffffe}, 0xffffffffffffff6c) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x22d, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, &(0x7f0000000080), &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}, 0x2a5) sendmsg$netrom(r2, &(0x7f0000000300)={&(0x7f0000000140)=@ax25={0x3, {"babcc3a81b7f94"}}, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x20044800}, 0x10) writev(r4, &(0x7f00001a5ff0)=[{&(0x7f0000086fa8)="480000001400197f00bb4b01fd0d8c560a880000f217e0020000001d000000a2bc560000000000000200000028213ee206000000000000ffff5bffff001ce1ed5e00000000000000", 0x48}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000540)={0x0}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000180)="c0b9f729560317d50c276e7eb52d9ea314f0a753a67065809c11b71f456e1aa5bdab0e7836da0f4d63c3a2") ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000580)={r5, 0x8}) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x6, 0x3}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0xb, &(0x7f0000000040), &(0x7f0000000ffc)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000040010000800200000000000098030000980300009803000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x4d0) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:25 executing program 6: getpgrp(0x0) getpid() gettid() getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000740)) r0 = gettid() r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f0000000140), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) timer_create(0x3, &(0x7f0000000100)={0x0, 0xf, 0x2, @tid=r0}, &(0x7f0000000140)) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000700)={0x2, 0x3f, 0x84, 0x40000000d4f0, 0x1f, 0xae8e}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 4: r0 = getpgid(0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0xfffffffffffffff4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x20000000000, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000007c0)={r4, 0x7ff, 0x6, 0x6, 0x4, 0x401, 0x1ff, 0x8, {r4, @in={{0x2, 0x4e20, @rand_addr=0x7}}, 0xffffffffffffffad, 0xffffffff, 0x3, 0x7, 0x4000000000001}}, &(0x7f0000000140)=0xb0) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)=[0x7, 0xea9a]) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@random="345c7a4821a0", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [{[{0x9100, 0x1, 0x8, 0x3}], {0x8100, 0x800, 0x80000001}}], {@canfd={0xd, {{0x0, 0x20, 0x3, 0x2}, 0x4, 0x3, 0x0, 0x0, "e8172f54b96177b3fbc7f5acf588ed6be4ef15fa103dba8780a5c68d730714d7e56ad5593c20b13856fac7592e47cdc140ca912f03284c70e8c22836de50dc68"}}}}, 0x0) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/netlink\x00') read(r4, &(0x7f0000000240)=""/85, 0x55) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000380)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000180)='/selinux/status\x00', 0x0) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000003c0)=0xfffffffffffffffa, 0x4) sendfile(r6, r4, &(0x7f0000000200), 0x200000010000) r7 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r7, 0x6, 0x21, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xfb, 0x0, 0x50}, &(0x7f00000005c0)=0x18d) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r8 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r8, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x6, &(0x7f0000000300)) clock_gettime(0x2, &(0x7f0000000140)) 2018/03/30 07:10:25 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(0x0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(0x0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(0x0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)=0x2ca) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x1000000000000, 0x4, 0x0, 0x5, 0x1f, 0x201}, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0xfffffffffffffffc, 0x10000000000491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) prlimit64(r0, 0xf, &(0x7f0000000140)={0x0, 0xd0}, 0x0) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000740)='s{z1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000000100)={0x40000000}) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000700)={"3379786b616c6c657230000100f60040", 0x200}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) sysfs$3(0x3) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @multicast1=0xe0000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)="8907000900", 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 6: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000007c0), 0x2b9, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) ioctl(0xffffffffffffffff, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r2}], 0x20000000000000b5, 0x0) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/172, 0xac}], 0x5, &(0x7f0000000500)=""/231, 0xe7, 0x80000001}, 0x40) mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r9}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="c4b7bf8216bd3083fe37a589cbc50cc0284363e31e65a20162aa693790a051f92d3ef7fdbef38d286d18eda986579b6a2b6bb5a82650168744f3d22dcfda3a2a50f1b67a048f078b7ba8248991be8bd647cfad62679488e0a6edc39074b1207fba22b5f611ce938a22650f42f1a29228efb12eaa5190ef9803f09d2720e4fe1f745190db3c78f7817831898d756aa1aa174e20f4f9491fb83bf985947e98fc5a1f8ec35db304f2080f573fe5fc659c547420ff1b222a41daaf851512c3be7c45e24d6931eb66132a297e081d4970b2bd1c7e18f32a04f49d13466a86f0401b6e0b769aed51d56ad9dda735a307973ee24d596ee9040fb0172cbb46c6a7464ce363a407a55f484d4c0fddbb7e5d426354949cb44ce90d7dea39fd0b3ae38900482154560c234b9e357090e1939136705176a382cee58dbb946c82da880cbb78e67f988e72752fc723e931a651fa5f7de4e765cedcd44ec8814af498375f4e80ea95d0911c0ecb498dec44b2afe70a22a2d10a0b6be1ca8c0f32695db8ae7189170301a6776ffa4ba794525b222f6cea8fad287a268088ef25529698ac950c9c6246cd7bc7d8a55c009a3ff4440a833e689d23ae2dc3ffc79e9b084d69e627348851a720141b6b7aa391873367bcdf4bab20ee1971a371b591803e0a34382c9b6eaf585160904abfec0b185937116b3c22048622231faf155de7cfe794a8aac2c4604abfd47bb67d3a62d757f00f0dc0d2d5a0600224655fec95d4f4055bf3ce39aeb489ba6ff8af590f9a02a7778c424a2f61f6ca77ec1b5b50a58e20f848665a70cc4223c23fb138c3ca5af84edf7ee2c1c9fedd5d30cd67fdc8686ce68f0f429ba6e7e59a04d2c6b9ef7e64fd6b0fa82ef8b3af82b1cdab38557c424f38044fe1c807c95f6ff3f9281f12e40f49dbb582b8a9cdc785818f9a667f2afc69963b8163a27fb587146bce77202a6a20e3e332f330e25b618502ed5ed068f62b02f88a521abffb578ae904aa4b3e0b784f243a7f5172a40a037d932faf544bbbffbffdb1ca55ea9af22dc309cb809fdad6b3bdd04d4aa9af02fae691acd8cf0ec65bb0c8e4d62712b725b426b4e4fa45ff37e45f65e1ffbc912cc077ea1aaf8c53a2203ed14b683890896b9ef23d760db1ebb8c6a7b3bf6395c3a07a20f2e793fa4dc0ca4f48a0e1c6f802854895b7372bb4b3deb647337356ddf40a91013e9bc2e286c96e5e26aa7cdc45b847c5af49e4a3de4ff3d0f317ef0bc4c42a61eefeb430fc8405d7fb21e63e3b1ae90d79bf8a7bf26396ec571a035f7c02a81f9f882f5a4d102b1efd8fa96bc141b87a897a4d7da0504076cd7e095f6066af7f78ea0a78b4c4103eaea4ef7247a00db77318cdd40295befb8a8867bd536163f9af948f5325e0f6c06df0b198d0ee51dec0354bace777d84aded9c045c45bb5618d3b3d1d80389726f005b09d3adbd6b75c0d77637f5ff5a7d6efb1532e018f9a0b2ecd50de0574814c796022b4f4dea7fafa38749039b075bd1eca10c776d32b69127c6043092638fe7e50a1dcfab1325e24b5ffd4e2ed6ff7b63eadc8e91af1407afb8bfe72b331feb1aeb8b54cfaa00ffe6e9782e6cb93c4869711b139bea2b87d839258680a62c8a270fea6c66ca2ee3148e392f24f7cc3167c37e3ca3ae156e01afb483587592c0853c72ad6faf7fe1e6af1244ced894ecaf7a63329ad9f0999bde8248735da7b9f44c24edecaaceb87923971677392ef7b5027c7c3e35df07767af9d0a5f1d6a7d828fdc664673438a49110cceadbe46ee804cff4f194d475670cc108af68dd2f3458ebde5852082701f6f10b01bf38776079efc0a43cce25f0601b6991ff1fe60d9b5fd79409b135b5207d02f78198b50f7f35163482963f9ba35255b8e9a0fb04c8d1a93f6720540c539319154d0e80179363288d38041257f66c8b8b91581afdbf3d47ccd143640b1e0eb6454b3ee8fde6e2fa066aa2c62a18ed6543234cb551003b0a37734b06a683b59ff1ccac55d661178c7b95335e97e08ade13af05d8a0f7fbd2b60f1198194ced9fe7dbbcc82e648d1bbd83893c101f1bb92ab1434cba73c5f7bee5ce8ee3d9b38175728f16aab09877940b9aa9fb78fbd763f6fb4d6b98b41b1d15d1c7bf35a1333f7b6386eddff918585e6fb73e5972237edaa4def59418db8caa2c895d4101c5001c30cdb52a5f56c64fe0b8de9d33420efca9776e84f3e09c2b6e4b03309977495a97a651d2c166072ef30a3ae78e7c6f0e5093de8c7e1a242095faea6a2acfea56c74cff511e9d0f484ae425d4672c8b744d5989eb41209402f8eb988ffc5bd608f0432020af56417d94304908fe55fe5a12c4eb292620e4861a464d732c786c9ef539666d77983cee1472dcbac4480371a4815ff420b29fa1878eae853eb9b5032a69c37d769d71da06b140d93408d307b6c7b3b9c94cc5ce737015983d786266f9accdc58761e1da7da6b809504437a20cb626851d0f31b2eeaf2824a810df20285300d9c567c92283d37763c8f9b8d23bf8b3508d68b7d8305656409e310c13c7544968d6a3a57d43c857df898512a7c63519ea183c0184f859ec65a3ba7b3df45e89eb0122166b32e4c5fd013f7920027fdf5fa925dd4b5797ab5bb47958537d48a8ae717fbf08a60d07bb62da38c785fb95eb3f66ff177f4ceb26ef78ebb3ebbdd369abe55d5238e95ba3f98e4af5ff0dee7008335ff2b35960b60bf5e7871f1244103f6ab37ab5b5f9afd8d5620d99f9f23816b70f6d4220c66fc3d99501f1bc24c31cbdeaa3c3df750b00ba4b0d2e1828f0b5437ec54e11df4f8f895411e0a4be96b3cfb76894ad98f2fd80abbf1c5aacf8dfced52ce1143a6da94210d3f7e3173e1198947501769fb302bbcfd4f8c94b0cac8b66daba9d205503a0c565aa6a5d307c4aec4104406561f9c8e24f5071c81f60959973fc27921b610ef7a1be70e5a261ac479c3ee3d2d84d07a1667b5ff74e061e47f832e22a673040badca6e05fc86801844cf295f11d7f33440d3262ecc179fe19db81f34e097072e669853b25f541f5a6dfc04dea2e68fe65853b4a32c74a4810cbad3c29e52b42e8d2ac40d0bfe61f6242fcee30ef327af4482afd9eb23a639b4975a010146fb33c394a895b00d5160f4a5178052d9c4f5de26b7ba765e3a0b0e39f5c6f6166e6c34b504e48c84706c10305871adda58de366d6dbcde4c79855c1bed220b57b6a1f90e882b824810cbcf99fbdcefeb5bcc3b56557d747f0b14a1bf3bffbce6cb7cefa4ebc46c19a2e657d9c0b76646de6b87c3d5e24168d32096fb129d8a2ea6c2febfc1e475f814270171ab430e25f98a10457e50602a1a35f263b67187af91c27d9c98c39bca5cf40cbdbaa55e350e912f6d56a40dd311fd9b49348d68f4e7b471b517bdbc3652f6b5da3e9d2d79e931abc9e9f253e31438aaf39aca38dd8e42c69e3c53543f960b353b073392b249462eb527b9089e5c35ac9ea9839f5588ade6190d39c1021e96c31467d5b82ee987ab224e0748a77c43d7e973caee496780339903ee5535b4102e9dceb0058ffa1ecb2493ece50fba709745c663d26c39d14f2791afc0d5f7b131b77a871f99add67a99adabaceeb8079ff1a662d82d84abec5718a2af3f5eb550dfb78cb0c88b7c4ed0267bd0c1508f3a38f7b4af5edb1f8a920ebf4e7e634aa9e1d5a1cd623861b4c369917171e666f512b4511da34606ca8e77f1317ab4618609cdb1a2b36c8f120a31498e6480caa0b68fc0f5994264ecd5122aabd181d60ee0508bad04830ca978d199b3c590ea3677545f533d69644d92d844186da78efb9931c84e0858a5aa7c9db033b523158e635dada697bdf7109dba244088b6a004d5fdbb5a928ac8800d47d95160e3bc4fe349486dbf5c501fffd5ae5b6802ea3fdcc715b07e30c0d4e83d3062f9b7c0cb025f6d02b9bd874890329feb4605df9f6529d557fa1c7d54ff017dd3660eac498bb97bce1acd706b232f5eb8fe4eadacb771f93b9d2262d2a3128f01e94b6cee46a5aea21f34c03153b5b200402d61bf92aaa48f083c118cf74fed0bc803bf659703e1f98304326f3ceeecd9823db500f1efa43c7870825c1f0bec713c8e5621c10989986d2f5b34fdce9d62304ad7a4606df506d304ca28c1b854927ef218d2207edab953c681cb6b5d4691c7ed915be1ba63854cc779aacbe2386e32a399f1b10ab977e0cbd642433f397a8fa930d24908bbe3b529ed646641c8f7528652ea396266b04246fb7e98ca0410a45799978d8076c157f0081a09f1289170a0acdedaa6fff33fc0f65f103b916ff904ecfcd235f11f4cffec3d704a3b3d477cb17e49e9c82bdfa702966139c27ff1fdd2c0b06171aab8a27893ba2b7806354126961f815f43a31e56fbd59167c5b6fa7909bdf6aa3d9c3effe5c5409ac2bab0c5a786f67c11c8d98c391ea610c203793477e01f227aa65a7fcc1de79bdb928adda6a753c8d2c1245cda75c2ba2bcff2de35d84eba5223ea7e2c5a789f5eb3bf84109b151d54e1f28e5c378006d2f5c99bf9a7c24b3df2b57a4535fdcfb8782ee2a41033d806cc53920721bd14b2"}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x17) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(r1, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000740)=0xbf) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3b, &(0x7f0000000140), &(0x7f0000000500)=0x128) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) sched_setattr(r0, &(0x7f0000000100)={0x30, 0x3, 0x0, 0x9, 0xffff, 0x100000001, 0x5, 0x1}, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 6: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000700)=0xc) getpgrp(0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vga_arbiter\x00', 0x309001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) r2 = getpgid(r1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r5 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r5, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f0000000740)=0x10) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r14) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) sendmsg$nl_generic(r3, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x1fc, 0x23, 0x10, 0x70bd26, 0x25dfdbfc, {0x19}, [@nested={0x1e4, 0x19, [@typed={0x8, 0x39, @u32=0x9}, @generic="894377f94da3eb7fb910a4b452a4d25ad519b15bd7c63db7fce4750135ea3bdb48daffa59eebf8810dfe121dd59aa5f0020f26bdebe1fac78694337988ae2176c9a8f88145b71cad", @typed={0x70, 0x12, @binary="747197fc1274a953441d654e43e4a0127583f7339aa69add2ed94d8cc3c83a4d1c29670a547e6ce5614206c124fb4fb75718f1b5535a24127f4de3b638adde43edfd07d524a6bdbede2529153f108c67f7346d91654016f53515862e79fe36d792d871596000ef4ac8890bcf"}, @typed={0x8, 0x81, @pid=r0}, @generic="f783a07a58957b6e40f6aff4c5ca39b944c7ab543d4a3741d53b8c5dbd1d57b01ff2124f25bb339c1f20be916627da6267886921cb685ad8dc49400cda8c2dd743a70dd1b83910325f9875a2a3e038d4ee5a46fda1a70926bee814da7ddcf4adacf9970b2a5929bae6a407216373e2fb7748615308940026c2973e1e1f4e726bd752f6488968afa7125fe53a196440abf87bcae0116b1c6bc1e5e3ec4af7a52a480db25f7b37d51ed8b9b61a1949a3907b9882e4d77976050a1ecd0525cc67007c7459ad9052d1ba099e8137768f5f37591252342005328800d8d454abb3461eb4a65458dbb3da61668ba56972fe49bd", @generic="07a45c821faf381de922eb4cdb9fc6857bfebcd868f2ddfae11e35db1a29", @typed={0x8, 0x70, @pid=r0}]}, @nested={0x4, 0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r2, 0x2283, &(0x7f00000007c0)="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") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f0000000700), &(0x7f0000000500)=0xfffffffffffffff1) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x101, &(0x7f00000001c0)=[{0x6, 0x0, 0x5, 0x400000e5}]}, 0x354) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r4, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8000}, 0x5}], 0x1, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@nfc={0x27}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="6645c0956ffeec997ae3b59698756da82c0fcf8b15d8c19fbd2d82a1e1b566bfbf326bc155eab79c", 0x28}], 0x1}, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000026c0), 0x4) shutdown(r1, 0x8000000001) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000, 0x20000000002, &(0x7f0000002000/0x3000)=nil) r5 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x5, 0x81, 0xfffffffffffffffa, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000740)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x27a) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e22, 0x20, @empty, 0x3ff}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={r4}, &(0x7f00000003c0)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x6, &(0x7f0000000540)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x4001}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000a00)='/dev/net/tun\x00', 0x0, 0x10000) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x509000, 0x102) mq_timedreceive(r3, &(0x7f0000000140)=""/45, 0x2d, 0x5, &(0x7f0000000700)={0x0, 0x989680}) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x803d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000007c0)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0), &(0x7f0000000540)=0xde04bb9ce12dd8aa) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0xfff, &(0x7f00000004c0)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000940)={0x0, 0x31, 0x1, @thr={&(0x7f0000000800)="608c6328abf6d70d4e180c4d1faa1044ced173486efb6ba2b13c96700b23a216672b47383fc9bfd8264ddc638e85c821fc3eca649c40949dfa46e8628c0e7a8cb35ee861615b530ee2a6f9becbcba6544249ffb2fdcd8a1e6a99ad591b209d2cf6499eff8b38a521fc176ca7f24a274ffcd8b1cc05d4fcb1bead7065b637fbd47cf3c1d7daf5ca10da69c9d5d53710d06a68f8f3e789af06c9809829bfc1172bd3c76ce8cf29be7897b2a84162f14e4a4c8b77", &(0x7f00000008c0)="4d98ed3ee8cfe2e25e4fa0cc1b5d0521651dd78bcd03017cb4ef1c9c11fb0955f52df6cc330e9fa2a0f5562d40c3ead98ff4e3a630abfe1d41480323a9df9294e72a6523e6e2f6816dc772e02384ecf05027d9f202d8d3ee3d3029e3a7a3af24b524c11c7411cabf2cf2"}}, &(0x7f0000000740)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) recvfrom$packet(r3, &(0x7f0000000100)=""/26, 0x1a, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x8000000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x7fffffff, 0x8, 0x1f, 0x7, 0x48, 0x7}, 0x1c) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x12300, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/03/30 07:10:26 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(r2, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="c4b7bf8216bd3083fe37a589cbc50cc0284363e31e65a20162aa693790a051f92d3ef7fdbef38d286d18eda986579b6a2b6bb5a82650168744f3d22dcfda3a2a50f1b67a048f078b7ba8248991be8bd647cfad62679488e0a6edc39074b1207fba22b5f611ce938a22650f42f1a29228efb12eaa5190ef9803f09d2720e4fe1f745190db3c78f7817831898d756aa1aa174e20f4f9491fb83bf985947e98fc5a1f8ec35db304f2080f573fe5fc659c547420ff1b222a41daaf851512c3be7c45e24d6931eb66132a297e081d4970b2bd1c7e18f32a04f49d13466a86f0401b6e0b769aed51d56ad9dda735a307973ee24d596ee9040fb0172cbb46c6a7464ce363a407a55f484d4c0fddbb7e5d426354949cb44ce90d7dea39fd0b3ae38900482154560c234b9e357090e1939136705176a382cee58dbb946c82da880cbb78e67f988e72752fc723e931a651fa5f7de4e765cedcd44ec8814af498375f4e80ea95d0911c0ecb498dec44b2afe70a22a2d10a0b6be1ca8c0f32695db8ae7189170301a6776ffa4ba794525b222f6cea8fad287a268088ef25529698ac950c9c6246cd7bc7d8a55c009a3ff4440a833e689d23ae2dc3ffc79e9b084d69e627348851a720141b6b7aa391873367bcdf4bab20ee1971a371b591803e0a34382c9b6eaf585160904abfec0b185937116b3c22048622231faf155de7cfe794a8aac2c4604abfd47bb67d3a62d757f00f0dc0d2d5a0600224655fec95d4f4055bf3ce39aeb489ba6ff8af590f9a02a7778c424a2f61f6ca77ec1b5b50a58e20f848665a70cc4223c23fb138c3ca5af84edf7ee2c1c9fedd5d30cd67fdc8686ce68f0f429ba6e7e59a04d2c6b9ef7e64fd6b0fa82ef8b3af82b1cdab38557c424f38044fe1c807c95f6ff3f9281f12e40f49dbb582b8a9cdc785818f9a667f2afc69963b8163a27fb587146bce77202a6a20e3e332f330e25b618502ed5ed068f62b02f88a521abffb578ae904aa4b3e0b784f243a7f5172a40a037d932faf544bbbffbffdb1ca55ea9af22dc309cb809fdad6b3bdd04d4aa9af02fae691acd8cf0ec65bb0c8e4d62712b725b426b4e4fa45ff37e45f65e1ffbc912cc077ea1aaf8c53a2203ed14b683890896b9ef23d760db1ebb8c6a7b3bf6395c3a07a20f2e793fa4dc0ca4f48a0e1c6f802854895b7372bb4b3deb647337356ddf40a91013e9bc2e286c96e5e26aa7cdc45b847c5af49e4a3de4ff3d0f317ef0bc4c42a61eefeb430fc8405d7fb21e63e3b1ae90d79bf8a7bf26396ec571a035f7c02a81f9f882f5a4d102b1efd8fa96bc141b87a897a4d7da0504076cd7e095f6066af7f78ea0a78b4c4103eaea4ef7247a00db77318cdd40295befb8a8867bd536163f9af948f5325e0f6c06df0b198d0ee51dec0354bace777d84aded9c045c45bb5618d3b3d1d80389726f005b09d3adbd6b75c0d77637f5ff5a7d6efb1532e018f9a0b2ecd50de0574814c796022b4f4dea7fafa38749039b075bd1eca10c776d32b69127c6043092638fe7e50a1dcfab1325e24b5ffd4e2ed6ff7b63eadc8e91af1407afb8bfe72b331feb1aeb8b54cfaa00ffe6e9782e6cb93c4869711b139bea2b87d839258680a62c8a270fea6c66ca2ee3148e392f24f7cc3167c37e3ca3ae156e01afb483587592c0853c72ad6faf7fe1e6af1244ced894ecaf7a63329ad9f0999bde8248735da7b9f44c24edecaaceb87923971677392ef7b5027c7c3e35df07767af9d0a5f1d6a7d828fdc664673438a49110cceadbe46ee804cff4f194d475670cc108af68dd2f3458ebde5852082701f6f10b01bf38776079efc0a43cce25f0601b6991ff1fe60d9b5fd79409b135b5207d02f78198b50f7f35163482963f9ba35255b8e9a0fb04c8d1a93f6720540c539319154d0e80179363288d38041257f66c8b8b91581afdbf3d47ccd143640b1e0eb6454b3ee8fde6e2fa066aa2c62a18ed6543234cb551003b0a37734b06a683b59ff1ccac55d661178c7b95335e97e08ade13af05d8a0f7fbd2b60f1198194ced9fe7dbbcc82e648d1bbd83893c101f1bb92ab1434cba73c5f7bee5ce8ee3d9b38175728f16aab09877940b9aa9fb78fbd763f6fb4d6b98b41b1d15d1c7bf35a1333f7b6386eddff918585e6fb73e5972237edaa4def59418db8caa2c895d4101c5001c30cdb52a5f56c64fe0b8de9d33420efca9776e84f3e09c2b6e4b03309977495a97a651d2c166072ef30a3ae78e7c6f0e5093de8c7e1a242095faea6a2acfea56c74cff511e9d0f484ae425d4672c8b744d5989eb41209402f8eb988ffc5bd608f0432020af56417d94304908fe55fe5a12c4eb292620e4861a464d732c786c9ef539666d77983cee1472dcbac4480371a4815ff420b29fa1878eae853eb9b5032a69c37d769d71da06b140d93408d307b6c7b3b9c94cc5ce737015983d786266f9accdc58761e1da7da6b809504437a20cb626851d0f31b2eeaf2824a810df20285300d9c567c92283d37763c8f9b8d23bf8b3508d68b7d8305656409e310c13c7544968d6a3a57d43c857df898512a7c63519ea183c0184f859ec65a3ba7b3df45e89eb0122166b32e4c5fd013f7920027fdf5fa925dd4b5797ab5bb47958537d48a8ae717fbf08a60d07bb62da38c785fb95eb3f66ff177f4ceb26ef78ebb3ebbdd369abe55d5238e95ba3f98e4af5ff0dee7008335ff2b35960b60bf5e7871f1244103f6ab37ab5b5f9afd8d5620d99f9f23816b70f6d4220c66fc3d99501f1bc24c31cbdeaa3c3df750b00ba4b0d2e1828f0b5437ec54e11df4f8f895411e0a4be96b3cfb76894ad98f2fd80abbf1c5aacf8dfced52ce1143a6da94210d3f7e3173e1198947501769fb302bbcfd4f8c94b0cac8b66daba9d205503a0c565aa6a5d307c4aec4104406561f9c8e24f5071c81f60959973fc27921b610ef7a1be70e5a261ac479c3ee3d2d84d07a1667b5ff74e061e47f832e22a673040badca6e05fc86801844cf295f11d7f33440d3262ecc179fe19db81f34e097072e669853b25f541f5a6dfc04dea2e68fe65853b4a32c74a4810cbad3c29e52b42e8d2ac40d0bfe61f6242fcee30ef327af4482afd9eb23a639b4975a010146fb33c394a895b00d5160f4a5178052d9c4f5de26b7ba765e3a0b0e39f5c6f6166e6c34b504e48c84706c10305871adda58de366d6dbcde4c79855c1bed220b57b6a1f90e882b824810cbcf99fbdcefeb5bcc3b56557d747f0b14a1bf3bffbce6cb7cefa4ebc46c19a2e657d9c0b76646de6b87c3d5e24168d32096fb129d8a2ea6c2febfc1e475f814270171ab430e25f98a10457e50602a1a35f263b67187af91c27d9c98c39bca5cf40cbdbaa55e350e912f6d56a40dd311fd9b49348d68f4e7b471b517bdbc3652f6b5da3e9d2d79e931abc9e9f253e31438aaf39aca38dd8e42c69e3c53543f960b353b073392b249462eb527b9089e5c35ac9ea9839f5588ade6190d39c1021e96c31467d5b82ee987ab224e0748a77c43d7e973caee496780339903ee5535b4102e9dceb0058ffa1ecb2493ece50fba709745c663d26c39d14f2791afc0d5f7b131b77a871f99add67a99adabaceeb8079ff1a662d82d84abec5718a2af3f5eb550dfb78cb0c88b7c4ed0267bd0c1508f3a38f7b4af5edb1f8a920ebf4e7e634aa9e1d5a1cd623861b4c369917171e666f512b4511da34606ca8e77f1317ab4618609cdb1a2b36c8f120a31498e6480caa0b68fc0f5994264ecd5122aabd181d60ee0508bad04830ca978d199b3c590ea3677545f533d69644d92d844186da78efb9931c84e0858a5aa7c9db033b523158e635dada697bdf7109dba244088b6a004d5fdbb5a928ac8800d47d95160e3bc4fe349486dbf5c501fffd5ae5b6802ea3fdcc715b07e30c0d4e83d3062f9b7c0cb025f6d02b9bd874890329feb4605df9f6529d557fa1c7d54ff017dd3660eac498bb97bce1acd706b232f5eb8fe4eadacb771f93b9d2262d2a3128f01e94b6cee46a5aea21f34c03153b5b200402d61bf92aaa48f083c118cf74fed0bc803bf659703e1f98304326f3ceeecd9823db500f1efa43c7870825c1f0bec713c8e5621c10989986d2f5b34fdce9d62304ad7a4606df506d304ca28c1b854927ef218d2207edab953c681cb6b5d4691c7ed915be1ba63854cc779aacbe2386e32a399f1b10ab977e0cbd642433f397a8fa930d24908bbe3b529ed646641c8f7528652ea396266b04246fb7e98ca0410a45799978d8076c157f0081a09f1289170a0acdedaa6fff33fc0f65f103b916ff904ecfcd235f11f4cffec3d704a3b3d477cb17e49e9c82bdfa702966139c27ff1fdd2c0b06171aab8a27893ba2b7806354126961f815f43a31e56fbd59167c5b6fa7909bdf6aa3d9c3effe5c5409ac2bab0c5a786f67c11c8d98c391ea610c203793477e01f227aa65a7fcc1de79bdb928adda6a753c8d2c1245cda75c2ba2bcff2de35d84eba5223ea7e2c5a789f5eb3bf84109b151d54e1f28e5c378006d2f5c99bf9a7c24b3df2b57a4535fdcfb8782ee2a41033d806cc53920721bd14b2"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3a, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/enforce\x00', 0x2, 0x0) openat$cgroup_type(r4, &(0x7f0000000700)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f0000000140), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000000740)="a600e53e2480aff6dcc660590d5708a1e16a91f207177443c56b0969c5c2cf9c23155809cd8cb5e9672d4f9161a3e4f32ebc") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0xffffffffffffffff, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0xffffffff}, &(0x7f0000000540)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={r4, 0x0, 0x20, 0x1, 0x94}, &(0x7f0000000140)=0x18) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz0\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x4000000000000000, &(0x7f0000000700)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 2018/03/30 07:10:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"6970365f767049c2109afb2abdd08400", 0x931e}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x100082) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) userfaultfd(0x80800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f0000000740), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r2, 0x2283, &(0x7f0000000700)="a6e8dc6699c7ecdb3114f8b6e5f9611b70c3e6746a965c553f2b65499e93bfebda0a738b536bc38d0d90e0b682c070f7a6bdae3cf6e3d05d4505") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000840)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r7, r8/1000+30000}}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x4, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 5: r0 = getpid() r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x400000000000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9323}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = syz_open_procfs(0x0, &(0x7f00006e7ff5)='net/ptype\x00') preadv(r8, &(0x7f00005e9000)=[{&(0x7f00000000c0)=""/182, 0xb6}], 0x1, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r6, &(0x7f0000e77fff), 0xfffffffffffffd8a, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x6, &(0x7f00000002c0)={0x0, 0xf, 0x0, @thr={&(0x7f0000000100)="23138f7ddf43194135c7377b1385f5bd24ed1ad9f38c99a8c87c83b92683c0181ea5161a7d1a690012c3a9cfc93e8675c55a99d40e9730816970f0da823477a6125f51c9c83c", &(0x7f0000001040)="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"}}, &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000740)={0x0, 0x23, 0x4, @thr={&(0x7f00000007c0)="1eef507b62ae0f8403f522775578044d814970595f54606c783629034bf74ee31a00e87ec5e765a87b6407af430c6ef350f3ba899bc22ea871b672b8e7cf96cf6a25344e1d846c85434109bac3a35530571ebc7a380755c99c0e05659e34aaa4e0da64ee2251d0f1a5f74a7d4a3eb9c91bf8574b712940f97b95703fb341140c979cbbd6dd221eb419b5eb9d88c5fac5509dd85012b6edfaaee523f8b61cf6a8c745c6d5a38442ca557dd3fa52970c3ef45ece797576ce1e7fd951a2cb2967160575360fcf8bd822fc8a274164826d8038c381c1cd8c6164fd782edaff62bbd12db03d4a", &(0x7f00000008c0)="0ba4757235273be26ecf8f1e76b73eed9e4a0fa1b5798aa9348f077362c090240ff8e52a3c3da5ad50d5e146d0bc488d5825bccebb34e76d031da006a47123c314184e405031bb2678bdef7b6a045d7e58ffbe95f182da453f8c74cee69a4b0c395467e0180a5699a51748d8ea180abdd0c573761a840f614a98a0722bf973ac7865ab7ef6de2500205406ac53"}}, &(0x7f0000000980)) timer_create(0x5, &(0x7f0000000b00)={0x0, 0x2b, 0x6, @thr={&(0x7f00000009c0)="8965b151354f304288652958304830e374c15e62586a7b47515ea26e0d49c5537f7fe5cce0fc29af0f7dedc371f185f2328b042f0b3d23454c1a0fcae5c84eeffa23bcb265a599c39f0224023f416dc35c42cff654778314494c4a14a77bbd41ad5534094a6879abc21a4f319a938f24f4f75ea2a87a436c2c7ae4e92f30a3f2300e2f0108044776c2b724c5dfaf3173e1dbc66c444b02136843b23193aaa3506fabcb580c480c5eb7858fa552e572cd15ad3c110683345084cef0fafc504bca5c1b22a27ec30699544cc71941d3bb96ee6ffd13aecbe110cc8b4dd318f09cd58241d673e43a54ef2a", &(0x7f0000000ac0)="4e0157a8e505465f8790c4abf1b96d4e8bdde541033b1bd17da13daadc32042e1577bf76b3a44d0806828d6dedbdc16d7f21"}}, &(0x7f0000000b40)) timer_create(0x0, &(0x7f0000000bc0)={0x0, 0x4, 0x1, @thr={&(0x7f0000002040)="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", &(0x7f0000000b80)="ebc71a17a18b96205aee334ff3db5d87ab41fcfc1af55163"}}, &(0x7f0000000c00)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r7, r8/1000+30000}}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4201}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) dup(r2) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x24, 0x1}, &(0x7f0000000400)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x7, 0xa67, 0x40000000006, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000740)={0x4, 0x201, 0x6, 0x6, 0x0}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={r4}, &(0x7f0000000700)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f0000000140), 0x30, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) socket$packet(0x11, 0x400000003, 0x300) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0xfffffffffffffffd, 0x2) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x2, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000180)) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r7, r8/1000+30000}}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x931f}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0xff, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0xc1d2, 0xfff, 0x7e0000000000000, 0x6, 0x954, 0x5, 0xfffffffffffff001}, 0xffcc) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) getpid() 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r5, r6/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r7, r8/1000+30000}}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x3f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={r9, 0x19, "41180100e169b873273abe6b049a766aaca8dcbb4e47963bf8"}, &(0x7f00000002c0)=0x21) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r10}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="c4b7bf8216bd3083fe37a589cbc50cc0284363e31e65a20162aa693790a051f92d3ef7fdbef38d286d18eda986579b6a2b6bb5a82650168744f3d22dcfda3a2a50f1b67a048f078b7ba8248991be8bd647cfad62679488e0a6edc39074b1207fba22b5f611ce938a22650f42f1a29228efb12eaa5190ef9803f09d2720e4fe1f745190db3c78f7817831898d756aa1aa174e20f4f9491fb83bf985947e98fc5a1f8ec35db304f2080f573fe5fc659c547420ff1b222a41daaf851512c3be7c45e24d6931eb66132a297e081d4970b2bd1c7e18f32a04f49d13466a86f0401b6e0b769aed51d56ad9dda735a307973ee24d596ee9040fb0172cbb46c6a7464ce363a407a55f484d4c0fddbb7e5d426354949cb44ce90d7dea39fd0b3ae38900482154560c234b9e357090e1939136705176a382cee58dbb946c82da880cbb78e67f988e72752fc723e931a651fa5f7de4e765cedcd44ec8814af498375f4e80ea95d0911c0ecb498dec44b2afe70a22a2d10a0b6be1ca8c0f32695db8ae7189170301a6776ffa4ba794525b222f6cea8fad287a268088ef25529698ac950c9c6246cd7bc7d8a55c009a3ff4440a833e689d23ae2dc3ffc79e9b084d69e627348851a720141b6b7aa391873367bcdf4bab20ee1971a371b591803e0a34382c9b6eaf585160904abfec0b185937116b3c22048622231faf155de7cfe794a8aac2c4604abfd47bb67d3a62d757f00f0dc0d2d5a0600224655fec95d4f4055bf3ce39aeb489ba6ff8af590f9a02a7778c424a2f61f6ca77ec1b5b50a58e20f848665a70cc4223c23fb138c3ca5af84edf7ee2c1c9fedd5d30cd67fdc8686ce68f0f429ba6e7e59a04d2c6b9ef7e64fd6b0fa82ef8b3af82b1cdab38557c424f38044fe1c807c95f6ff3f9281f12e40f49dbb582b8a9cdc785818f9a667f2afc69963b8163a27fb587146bce77202a6a20e3e332f330e25b618502ed5ed068f62b02f88a521abffb578ae904aa4b3e0b784f243a7f5172a40a037d932faf544bbbffbffdb1ca55ea9af22dc309cb809fdad6b3bdd04d4aa9af02fae691acd8cf0ec65bb0c8e4d62712b725b426b4e4fa45ff37e45f65e1ffbc912cc077ea1aaf8c53a2203ed14b683890896b9ef23d760db1ebb8c6a7b3bf6395c3a07a20f2e793fa4dc0ca4f48a0e1c6f802854895b7372bb4b3deb647337356ddf40a91013e9bc2e286c96e5e26aa7cdc45b847c5af49e4a3de4ff3d0f317ef0bc4c42a61eefeb430fc8405d7fb21e63e3b1ae90d79bf8a7bf26396ec571a035f7c02a81f9f882f5a4d102b1efd8fa96bc141b87a897a4d7da0504076cd7e095f6066af7f78ea0a78b4c4103eaea4ef7247a00db77318cdd40295befb8a8867bd536163f9af948f5325e0f6c06df0b198d0ee51dec0354bace777d84aded9c045c45bb5618d3b3d1d80389726f005b09d3adbd6b75c0d77637f5ff5a7d6efb1532e018f9a0b2ecd50de0574814c796022b4f4dea7fafa38749039b075bd1eca10c776d32b69127c6043092638fe7e50a1dcfab1325e24b5ffd4e2ed6ff7b63eadc8e91af1407afb8bfe72b331feb1aeb8b54cfaa00ffe6e9782e6cb93c4869711b139bea2b87d839258680a62c8a270fea6c66ca2ee3148e392f24f7cc3167c37e3ca3ae156e01afb483587592c0853c72ad6faf7fe1e6af1244ced894ecaf7a63329ad9f0999bde8248735da7b9f44c24edecaaceb87923971677392ef7b5027c7c3e35df07767af9d0a5f1d6a7d828fdc664673438a49110cceadbe46ee804cff4f194d475670cc108af68dd2f3458ebde5852082701f6f10b01bf38776079efc0a43cce25f0601b6991ff1fe60d9b5fd79409b135b5207d02f78198b50f7f35163482963f9ba35255b8e9a0fb04c8d1a93f6720540c539319154d0e80179363288d38041257f66c8b8b91581afdbf3d47ccd143640b1e0eb6454b3ee8fde6e2fa066aa2c62a18ed6543234cb551003b0a37734b06a683b59ff1ccac55d661178c7b95335e97e08ade13af05d8a0f7fbd2b60f1198194ced9fe7dbbcc82e648d1bbd83893c101f1bb92ab1434cba73c5f7bee5ce8ee3d9b38175728f16aab09877940b9aa9fb78fbd763f6fb4d6b98b41b1d15d1c7bf35a1333f7b6386eddff918585e6fb73e5972237edaa4def59418db8caa2c895d4101c5001c30cdb52a5f56c64fe0b8de9d33420efca9776e84f3e09c2b6e4b03309977495a97a651d2c166072ef30a3ae78e7c6f0e5093de8c7e1a242095faea6a2acfea56c74cff511e9d0f484ae425d4672c8b744d5989eb41209402f8eb988ffc5bd608f0432020af56417d94304908fe55fe5a12c4eb292620e4861a464d732c786c9ef539666d77983cee1472dcbac4480371a4815ff420b29fa1878eae853eb9b5032a69c37d769d71da06b140d93408d307b6c7b3b9c94cc5ce737015983d786266f9accdc58761e1da7da6b809504437a20cb626851d0f31b2eeaf2824a810df20285300d9c567c92283d37763c8f9b8d23bf8b3508d68b7d8305656409e310c13c7544968d6a3a57d43c857df898512a7c63519ea183c0184f859ec65a3ba7b3df45e89eb0122166b32e4c5fd013f7920027fdf5fa925dd4b5797ab5bb47958537d48a8ae717fbf08a60d07bb62da38c785fb95eb3f66ff177f4ceb26ef78ebb3ebbdd369abe55d5238e95ba3f98e4af5ff0dee7008335ff2b35960b60bf5e7871f1244103f6ab37ab5b5f9afd8d5620d99f9f23816b70f6d4220c66fc3d99501f1bc24c31cbdeaa3c3df750b00ba4b0d2e1828f0b5437ec54e11df4f8f895411e0a4be96b3cfb76894ad98f2fd80abbf1c5aacf8dfced52ce1143a6da94210d3f7e3173e1198947501769fb302bbcfd4f8c94b0cac8b66daba9d205503a0c565aa6a5d307c4aec4104406561f9c8e24f5071c81f60959973fc27921b610ef7a1be70e5a261ac479c3ee3d2d84d07a1667b5ff74e061e47f832e22a673040badca6e05fc86801844cf295f11d7f33440d3262ecc179fe19db81f34e097072e669853b25f541f5a6dfc04dea2e68fe65853b4a32c74a4810cbad3c29e52b42e8d2ac40d0bfe61f6242fcee30ef327af4482afd9eb23a639b4975a010146fb33c394a895b00d5160f4a5178052d9c4f5de26b7ba765e3a0b0e39f5c6f6166e6c34b504e48c84706c10305871adda58de366d6dbcde4c79855c1bed220b57b6a1f90e882b824810cbcf99fbdcefeb5bcc3b56557d747f0b14a1bf3bffbce6cb7cefa4ebc46c19a2e657d9c0b76646de6b87c3d5e24168d32096fb129d8a2ea6c2febfc1e475f814270171ab430e25f98a10457e50602a1a35f263b67187af91c27d9c98c39bca5cf40cbdbaa55e350e912f6d56a40dd311fd9b49348d68f4e7b471b517bdbc3652f6b5da3e9d2d79e931abc9e9f253e31438aaf39aca38dd8e42c69e3c53543f960b353b073392b249462eb527b9089e5c35ac9ea9839f5588ade6190d39c1021e96c31467d5b82ee987ab224e0748a77c43d7e973caee496780339903ee5535b4102e9dceb0058ffa1ecb2493ece50fba709745c663d26c39d14f2791afc0d5f7b131b77a871f99add67a99adabaceeb8079ff1a662d82d84abec5718a2af3f5eb550dfb78cb0c88b7c4ed0267bd0c1508f3a38f7b4af5edb1f8a920ebf4e7e634aa9e1d5a1cd623861b4c369917171e666f512b4511da34606ca8e77f1317ab4618609cdb1a2b36c8f120a31498e6480caa0b68fc0f5994264ecd5122aabd181d60ee0508bad04830ca978d199b3c590ea3677545f533d69644d92d844186da78efb9931c84e0858a5aa7c9db033b523158e635dada697bdf7109dba244088b6a004d5fdbb5a928ac8800d47d95160e3bc4fe349486dbf5c501fffd5ae5b6802ea3fdcc715b07e30c0d4e83d3062f9b7c0cb025f6d02b9bd874890329feb4605df9f6529d557fa1c7d54ff017dd3660eac498bb97bce1acd706b232f5eb8fe4eadacb771f93b9d2262d2a3128f01e94b6cee46a5aea21f34c03153b5b200402d61bf92aaa48f083c118cf74fed0bc803bf659703e1f98304326f3ceeecd9823db500f1efa43c7870825c1f0bec713c8e5621c10989986d2f5b34fdce9d62304ad7a4606df506d304ca28c1b854927ef218d2207edab953c681cb6b5d4691c7ed915be1ba63854cc779aacbe2386e32a399f1b10ab977e0cbd642433f397a8fa930d24908bbe3b529ed646641c8f7528652ea396266b04246fb7e98ca0410a45799978d8076c157f0081a09f1289170a0acdedaa6fff33fc0f65f103b916ff904ecfcd235f11f4cffec3d704a3b3d477cb17e49e9c82bdfa702966139c27ff1fdd2c0b06171aab8a27893ba2b7806354126961f815f43a31e56fbd59167c5b6fa7909bdf6aa3d9c3effe5c5409ac2bab0c5a786f67c11c8d98c391ea610c203793477e01f227aa65a7fcc1de79bdb928adda6a753c8d2c1245cda75c2ba2bcff2de35d84eba5223ea7e2c5a789f5eb3bf84109b151d54e1f28e5c378006d2f5c99bf9a7c24b3df2b57a4535fdcfb8782ee2a41033d806cc53920721bd14b2"}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x17) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x3) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f00000004c0), &(0x7f0000000700)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x4000)=nil, 0x4000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) readv(r1, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/157, 0x9d}], 0x4) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r5, r6/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r7, r8/1000+30000}}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000700)=0xfffffffffffffe82) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x6, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7, 0x0}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000007c0)={r4, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x5, 0xcee, 0x2, 0x3, 0xfffffffffffffff9}, &(0x7f0000000100)=0x98) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f0000000140), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000700)=@get={0x1, &(0x7f00000007c0)=""/206, 0x1000}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000140)={0xffff, 0x7, 0xf2e, 0x2, 0x1ff, 0x3}) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r5, r6/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r7, r8/1000+30000}}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x5, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100)=0x1000, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0xe8, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x6, &(0x7f0000000740)={0x0, 0x11, 0x4, @thr={&(0x7f0000000880)="85688a98368c45992d785af1c2c61699426e6e8af073285908df1ca043dfb3dec91bd4d2999f63505c9b048e46be2b76c4bc2913cb63f6c38f874c1d61eeccbeb67df63dc0774b901bddaf5b864caa9af692765650a17afd7f9d7763b8cc1afa51175ddf3382dfa442f7e8a052f2d961a3b53812fa0aff79c9bdb922ea9808013121779d93e47a9d94252d50476dca5d3f834184f7a0e6d0eec5962db6b27bdfc23fbdc54520f9bad020020573613824364d74bca53199efea29389470bd90d899079be76c89c6a1cdaf5489bdde4e7fe2", &(0x7f0000000140)="c26836"}}, &(0x7f0000000700)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000840)=@req3={0xc10, 0x401, 0x2, 0x20b5, 0x8001, 0x0, 0x8}, 0xa) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, r0, 0x6) r1 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r2}], 0x20000000000000b5, 0x0) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r9}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(r6) fcntl$setsig(r5, 0xa, 0x17) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fchdir(r4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) chdir(&(0x7f0000000100)='./file0\x00') prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000008c0)=""/204) 2018/03/30 07:10:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x3fffff) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0xfffe, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000007c0)={{0xfffffffffffff001, 0x9}, 'port0\x00', 0x0, 0x60, 0x20, 0x4, 0x1, 0x7fff, 0x1, 0x0, 0x6, 0x3f}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) ioctl(0xffffffffffffffff, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000700)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x40100000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x4, &(0x7f00000007c0)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}, 0xfffffffffffffffd}, {{0x0, r11/1000+10000}, 0x3, 0x0, 0x9}], 0xba) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f00000002c0)={r5, 0x3}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0x96) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 6: fcntl$getown(0xffffffffffffff9c, 0x9) r0 = getpid() r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x3e6, 0xb2, 0x7, 'queue1\x00', 0x5}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) bind$ipx(r3, &(0x7f0000000000)={0x4, 0x8, 0x2, "b302306a91de", 0x1}, 0x10) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x2, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) dup3(r2, r1, 0x80000) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) socket$pptp(0x18, 0x1, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000800)) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000880)={0x0, 0x0}) r2 = getpgid(r1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r5 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r5, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r14) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0xfffffed1, 0x4000000000000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x10000000000102, &(0x7f0000000700)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x7, &(0x7f0000000140)={0x0, 0x10000000032, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x80}, &(0x7f0000000540)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) dup3(r4, r3, 0x0) sendto$inet6(r5, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c", 0x45, 0x24000000, &(0x7f0000001480)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(0xffffffffffffffff, &(0x7f0000000400)="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", 0xc1d, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x0, 0x7, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x80, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7, 0xfffffffffffffffd}}], 0x87, 0x0, &(0x7f0000f40ff0)={0x77359400}) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") socket$packet(0x11, 0x3, 0x300) 2018/03/30 07:10:27 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x1ff, &(0x7f0000979fff)="a2") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0xffffff48) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000700)={'syzkaller0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x100004) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) setrlimit(0x1, &(0x7f0000000100)={0x1, 0xaa}) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000007c0)=@req={0x9b, 0x8001, 0x80, 0x5}, 0xfffffffffffffff6) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"736b7a4b616c6c650030000000000400", 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={"4a74f31c612f772b10001000", {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000002100)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000740)=0x1008) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={r3, 0x6}, &(0x7f0000000700)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x1ffc, 0x0) getdents64(r5, &(0x7f0000000140)=""/255, 0xfc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@dev}}, {{@in6=@local}}}, &(0x7f00000000c0)=0x1ee) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x74ba, 0xffffffffffffff81, 0x5, 0x6, 0x100000000, 0x6, 0x5, 0x10001, 0xcb3, 0xe8a, 0x7fffffff}, 0xb) ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000380)=0xeb) signalfd4(r6, &(0x7f0000000040)={0x400}, 0x8, 0x800) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x5a4, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}, 0x1c) r8 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r8, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x2}}, 0x26) sendto(r8, &(0x7f00000003c0)="eb422176e5b5e1b853953e68c948b60eca231c7fa3d2508c44032b40d3817eb3277b50504541d444b572353d2939a7ae1d9510afcad66a557b4cf3b6cd2186f028fafd041791bbec24b1892df70499634ba1caad2f8924ab7e2787f0c134620b053283a7d9c75bf58031bf5261dde0ac0a5e2fd675e0b0645003ce0a9aa7bc49b7e2b9d0c0faab22c14e558802cf32bf1cd17ef7cc69f5e5ae261f2e654d62bd0683bcd6ae695b7a5372f9033363f863ab2a6b62d08066c488a97b0ba44fbed8f7df11b8a29b461bc23c280695161d3872146f5c535a0ab5214f581f", 0xdc, 0x0, &(0x7f00000004c0)=@l2={0x1f, 0x2, {0x2, 0x6, 0x8, 0x2, 0x8001, 0x8}, 0x7fff, 0x59d}, 0x80) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0xffffffffffffffff) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffffc, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0xfffffffffffffffe, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r8) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x2, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x40, 0x6}, {{0x77359400}, 0x6, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{0x77359400}, 0x1000000000000004, 0x0, 0x4}, {{}, 0x20, 0x0, 0x6}, {{r9, r10/1000+10000}, 0x0, 0x80000000100}, {{0x0, r7/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000340)={0x6, 0x280, 0xfb, 0x4, 0x100000001, 0x7}) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100), 0x0) r4 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r7}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x200400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(r3, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0xfde8) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x400000, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000000000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r9}, 0x10) ioctl$TIOCMGET(r4, 0x5415, &(0x7f00000002c0)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) mlockall(0x2) fcntl$setsig(r5, 0xa, 0x17) connect$l2tp(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x2, 0x3, 0x0, {0xa, 0x4e22, 0x2, @loopback={0x0, 0x1}, 0x5}}}, 0x32) listen(r1, 0x3000000) add_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r10 = request_key(&(0x7f0000000480)='.request_key_auth\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)='\x00', 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000005c0)="f9cd40891d607612ca7e27cd538e826e63cca7dee4935b2f6efe7ac78f899f90a4740efd85b9108cbc12", 0x2a, r10) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x201}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f0000000700), 0x2d, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x4000000004, 0x1000000000100) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x8000000007, 0x0, 0x6e, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x951a, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x3}, &(0x7f0000000540)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x100000000, 0x100000000}, {{}, 0x4000334, 0x0, 0x7cd3}, {{}, 0xe40, 0x0, 0x6}, {{0x77359400}, 0x2, 0xb, 0x7803}, {{}, 0x3, 0x7, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{0x77359400}, 0x20, 0xe3bf, 0x5}, {{r9, r10/1000+30000}, 0x0, 0x3}, {{0x0, 0x2710}, 0x6, 0x9, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x10000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000700)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000740)={0x2, 0xfffffffffffffffd, 0x2, 0x7, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(r1, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x295) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000700)={0x1, &(0x7f0000000100)=[{}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r3, 0x89e3, &(0x7f0000000140)=0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x1140400) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0xfffffffffffffffc, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f0000000700), 0xfffffffffffffe0c, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r1, 0x2283, &(0x7f00000007c0)="008ca9395f20a694f82314abe4c1eb8e23afdc7d9010960ba5182626a05d325e7b2db44a9eba6d0091dba194ffbe18b509d56f403e7dae7d4577be20c3a17e65dd9a1098e9e14b67b7d6bdc589e24fdabaaf178b6c5530269e27ce7bfa3f077a4ab6436ab90861baa050d9faf96c9324ce415b390d05c38d462baee3ebf5f136819af35349876230431307d8585e8db653c2e195df29779dcc1957f72ac403cadade5c") clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x4000002, &(0x7f0000000740)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000000000/0xe000)=nil, 0xe000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100), 0x0) r4 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r7}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)=0x0) r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffca5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004000000, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000740)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5, 0x2}, &(0x7f0000000700)=0x8) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x4007, &(0x7f0000000800)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r14) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000006000/0x3000)=nil, 0x3000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4, 0x3}, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f00000004c0), &(0x7f0000000140)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x3, 0x3, 0xffff, 0x2, 0x10}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={r9, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r10}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) fcntl$setsig(r5, 0xa, 0x17) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000000100)="04000000b08fdc4880da90cbf4f03dd6320af10500000000000000bd1efb90e12e") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x23, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x7fa, @local={0xfe, 0x80, [], 0xaa}, 0xe46}, @in6={0xa, 0x4e24, 0x7, @empty, 0x8}, @in={0x2, 0x4e22, @broadcast=0xffffffff}], 0x48) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x210) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x200) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mremap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000005000/0x3000)=nil) timer_create(0x0, &(0x7f0000000080)={0x0, 0x3a, 0x1, @thr={&(0x7f00000007c0)="cf227c56a4e5a52a80b64b205feccca53553294ee2bbcd1e61e407738e8058b1c9c39104abc7593ee3cc096d9d83416fba9450119fb73e75612a68e3903a5e3cb44efc2a8e9aa5249eced0ca93377c2488b8a0831bae269a153656b9e49196736abf834ab82b19d83dc57363aac0026abe1db3c4b37dfd80838f39147cdaaae8fec3f0c7", &(0x7f0000000880)="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"}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={"79616f3000000291078ad700", {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100), 0x0) r4 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r7}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) rmdir(&(0x7f0000000100)='./file0\x00') ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x10000000008, 0x7803}, {{0x0, 0x2710}, 0x3, 0x5, 0x8000}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{r12, r13/1000+10000}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0xfffffffffffffd47, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x2, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x80000000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000700)={0xff, 0x0, 0x0, 0x7, r3}, &(0x7f0000000740)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='bond0\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000580)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="c4b7bf8216bd3083fe37a589cbc50cc0284363e31e65a20162aa693790a051f92d3ef7fdbef38d286d18eda986579b6a2b6bb5a82650168744f3d22dcfda3a2a50f1b67a048f078b7ba8248991be8bd647cfad62679488e0a6edc39074b1207fba22b5f611ce938a22650f42f1a29228efb12eaa5190ef9803f09d2720e4fe1f745190db3c78f7817831898d756aa1aa174e20f4f9491fb83bf985947e98fc5a1f8ec35db304f2080f573fe5fc659c547420ff1b222a41daaf851512c3be7c45e24d6931eb66132a297e081d4970b2bd1c7e18f32a04f49d13466a86f0401b6e0b769aed51d56ad9dda735a307973ee24d596ee9040fb0172cbb46c6a7464ce363a407a55f484d4c0fddbb7e5d426354949cb44ce90d7dea39fd0b3ae38900482154560c234b9e357090e1939136705176a382cee58dbb946c82da880cbb78e67f988e72752fc723e931a651fa5f7de4e765cedcd44ec8814af498375f4e80ea95d0911c0ecb498dec44b2afe70a22a2d10a0b6be1ca8c0f32695db8ae7189170301a6776ffa4ba794525b222f6cea8fad287a268088ef25529698ac950c9c6246cd7bc7d8a55c009a3ff4440a833e689d23ae2dc3ffc79e9b084d69e627348851a720141b6b7aa391873367bcdf4bab20ee1971a371b591803e0a34382c9b6eaf585160904abfec0b185937116b3c22048622231faf155de7cfe794a8aac2c4604abfd47bb67d3a62d757f00f0dc0d2d5a0600224655fec95d4f4055bf3ce39aeb489ba6ff8af590f9a02a7778c424a2f61f6ca77ec1b5b50a58e20f848665a70cc4223c23fb138c3ca5af84edf7ee2c1c9fedd5d30cd67fdc8686ce68f0f429ba6e7e59a04d2c6b9ef7e64fd6b0fa82ef8b3af82b1cdab38557c424f38044fe1c807c95f6ff3f9281f12e40f49dbb582b8a9cdc785818f9a667f2afc69963b8163a27fb587146bce77202a6a20e3e332f330e25b618502ed5ed068f62b02f88a521abffb578ae904aa4b3e0b784f243a7f5172a40a037d932faf544bbbffbffdb1ca55ea9af22dc309cb809fdad6b3bdd04d4aa9af02fae691acd8cf0ec65bb0c8e4d62712b725b426b4e4fa45ff37e45f65e1ffbc912cc077ea1aaf8c53a2203ed14b683890896b9ef23d760db1ebb8c6a7b3bf6395c3a07a20f2e793fa4dc0ca4f48a0e1c6f802854895b7372bb4b3deb647337356ddf40a91013e9bc2e286c96e5e26aa7cdc45b847c5af49e4a3de4ff3d0f317ef0bc4c42a61eefeb430fc8405d7fb21e63e3b1ae90d79bf8a7bf26396ec571a035f7c02a81f9f882f5a4d102b1efd8fa96bc141b87a897a4d7da0504076cd7e095f6066af7f78ea0a78b4c4103eaea4ef7247a00db77318cdd40295befb8a8867bd536163f9af948f5325e0f6c06df0b198d0ee51dec0354bace777d84aded9c045c45bb5618d3b3d1d80389726f005b09d3adbd6b75c0d77637f5ff5a7d6efb1532e018f9a0b2ecd50de0574814c796022b4f4dea7fafa38749039b075bd1eca10c776d32b69127c6043092638fe7e50a1dcfab1325e24b5ffd4e2ed6ff7b63eadc8e91af1407afb8bfe72b331feb1aeb8b54cfaa00ffe6e9782e6cb93c4869711b139bea2b87d839258680a62c8a270fea6c66ca2ee3148e392f24f7cc3167c37e3ca3ae156e01afb483587592c0853c72ad6faf7fe1e6af1244ced894ecaf7a63329ad9f0999bde8248735da7b9f44c24edecaaceb87923971677392ef7b5027c7c3e35df07767af9d0a5f1d6a7d828fdc664673438a49110cceadbe46ee804cff4f194d475670cc108af68dd2f3458ebde5852082701f6f10b01bf38776079efc0a43cce25f0601b6991ff1fe60d9b5fd79409b135b5207d02f78198b50f7f35163482963f9ba35255b8e9a0fb04c8d1a93f6720540c539319154d0e80179363288d38041257f66c8b8b91581afdbf3d47ccd143640b1e0eb6454b3ee8fde6e2fa066aa2c62a18ed6543234cb551003b0a37734b06a683b59ff1ccac55d661178c7b95335e97e08ade13af05d8a0f7fbd2b60f1198194ced9fe7dbbcc82e648d1bbd83893c101f1bb92ab1434cba73c5f7bee5ce8ee3d9b38175728f16aab09877940b9aa9fb78fbd763f6fb4d6b98b41b1d15d1c7bf35a1333f7b6386eddff918585e6fb73e5972237edaa4def59418db8caa2c895d4101c5001c30cdb52a5f56c64fe0b8de9d33420efca9776e84f3e09c2b6e4b03309977495a97a651d2c166072ef30a3ae78e7c6f0e5093de8c7e1a242095faea6a2acfea56c74cff511e9d0f484ae425d4672c8b744d5989eb41209402f8eb988ffc5bd608f0432020af56417d94304908fe55fe5a12c4eb292620e4861a464d732c786c9ef539666d77983cee1472dcbac4480371a4815ff420b29fa1878eae853eb9b5032a69c37d769d71da06b140d93408d307b6c7b3b9c94cc5ce737015983d786266f9accdc58761e1da7da6b809504437a20cb626851d0f31b2eeaf2824a810df20285300d9c567c92283d37763c8f9b8d23bf8b3508d68b7d8305656409e310c13c7544968d6a3a57d43c857df898512a7c63519ea183c0184f859ec65a3ba7b3df45e89eb0122166b32e4c5fd013f7920027fdf5fa925dd4b5797ab5bb47958537d48a8ae717fbf08a60d07bb62da38c785fb95eb3f66ff177f4ceb26ef78ebb3ebbdd369abe55d5238e95ba3f98e4af5ff0dee7008335ff2b35960b60bf5e7871f1244103f6ab37ab5b5f9afd8d5620d99f9f23816b70f6d4220c66fc3d99501f1bc24c31cbdeaa3c3df750b00ba4b0d2e1828f0b5437ec54e11df4f8f895411e0a4be96b3cfb76894ad98f2fd80abbf1c5aacf8dfced52ce1143a6da94210d3f7e3173e1198947501769fb302bbcfd4f8c94b0cac8b66daba9d205503a0c565aa6a5d307c4aec4104406561f9c8e24f5071c81f60959973fc27921b610ef7a1be70e5a261ac479c3ee3d2d84d07a1667b5ff74e061e47f832e22a673040badca6e05fc86801844cf295f11d7f33440d3262ecc179fe19db81f34e097072e669853b25f541f5a6dfc04dea2e68fe65853b4a32c74a4810cbad3c29e52b42e8d2ac40d0bfe61f6242fcee30ef327af4482afd9eb23a639b4975a010146fb33c394a895b00d5160f4a5178052d9c4f5de26b7ba765e3a0b0e39f5c6f6166e6c34b504e48c84706c10305871adda58de366d6dbcde4c79855c1bed220b57b6a1f90e882b824810cbcf99fbdcefeb5bcc3b56557d747f0b14a1bf3bffbce6cb7cefa4ebc46c19a2e657d9c0b76646de6b87c3d5e24168d32096fb129d8a2ea6c2febfc1e475f814270171ab430e25f98a10457e50602a1a35f263b67187af91c27d9c98c39bca5cf40cbdbaa55e350e912f6d56a40dd311fd9b49348d68f4e7b471b517bdbc3652f6b5da3e9d2d79e931abc9e9f253e31438aaf39aca38dd8e42c69e3c53543f960b353b073392b249462eb527b9089e5c35ac9ea9839f5588ade6190d39c1021e96c31467d5b82ee987ab224e0748a77c43d7e973caee496780339903ee5535b4102e9dceb0058ffa1ecb2493ece50fba709745c663d26c39d14f2791afc0d5f7b131b77a871f99add67a99adabaceeb8079ff1a662d82d84abec5718a2af3f5eb550dfb78cb0c88b7c4ed0267bd0c1508f3a38f7b4af5edb1f8a920ebf4e7e634aa9e1d5a1cd623861b4c369917171e666f512b4511da34606ca8e77f1317ab4618609cdb1a2b36c8f120a31498e6480caa0b68fc0f5994264ecd5122aabd181d60ee0508bad04830ca978d199b3c590ea3677545f533d69644d92d844186da78efb9931c84e0858a5aa7c9db033b523158e635dada697bdf7109dba244088b6a004d5fdbb5a928ac8800d47d95160e3bc4fe349486dbf5c501fffd5ae5b6802ea3fdcc715b07e30c0d4e83d3062f9b7c0cb025f6d02b9bd874890329feb4605df9f6529d557fa1c7d54ff017dd3660eac498bb97bce1acd706b232f5eb8fe4eadacb771f93b9d2262d2a3128f01e94b6cee46a5aea21f34c03153b5b200402d61bf92aaa48f083c118cf74fed0bc803bf659703e1f98304326f3ceeecd9823db500f1efa43c7870825c1f0bec713c8e5621c10989986d2f5b34fdce9d62304ad7a4606df506d304ca28c1b854927ef218d2207edab953c681cb6b5d4691c7ed915be1ba63854cc779aacbe2386e32a399f1b10ab977e0cbd642433f397a8fa930d24908bbe3b529ed646641c8f7528652ea396266b04246fb7e98ca0410a45799978d8076c157f0081a09f1289170a0acdedaa6fff33fc0f65f103b916ff904ecfcd235f11f4cffec3d704a3b3d477cb17e49e9c82bdfa702966139c27ff1fdd2c0b06171aab8a27893ba2b7806354126961f815f43a31e56fbd59167c5b6fa7909bdf6aa3d9c3effe5c5409ac2bab0c5a786f67c11c8d98c391ea610c203793477e01f227aa65a7fcc1de79bdb928adda6a753c8d2c1245cda75c2ba2bcff2de35d84eba5223ea7e2c5a789f5eb3bf84109b151d54e1f28e5c378006d2f5c99bf9a7c24b3df2b57a4535fdcfb8782ee2a41033d806cc53920721bd14b2"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) socket$unix(0x1, 0x1, 0x0) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3000, 0x7f, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000002c0)={r12, 0x3}) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x0, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f00000004c0)={0x0, 0x0, 0x7, 0x0, 0x16f3fc54, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000800)=@sack_info={0x0, 0x346, 0x1}, &(0x7f0000000840)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000740)={r4}, &(0x7f0000000880)=0x3cb) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f0000000540), 0x5, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000100)=0xfffffffffffffff8, &(0x7f0000000140)=0x4) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x3a7) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000005000/0x1000)=nil, 0x1000) 2018/03/30 07:10:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000700)=@req={0x1, 0x401, 0xffff, 0xe351}, 0x3ed) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x0, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0xffffffffffffff9a, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000007000/0x2000)=nil, 0x2000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7, r4}, &(0x7f0000000100)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x187, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) modify_ldt$read(0x0, &(0x7f00000007c0)=""/197, 0xc5) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="c4b7bf8216bd3083fe37a589cbc50cc0284363e31e65a20162aa693790a051f92d3ef7fdbef38d286d18eda986579b6a2b6bb5a82650168744f3d22dcfda3a2a50f1b67a048f078b7ba8248991be8bd647cfad62679488e0a6edc39074b1207fba22b5f611ce938a22650f42f1a29228efb12eaa5190ef9803f09d2720e4fe1f745190db3c78f7817831898d756aa1aa174e20f4f9491fb83bf985947e98fc5a1f8ec35db304f2080f573fe5fc659c547420ff1b222a41daaf851512c3be7c45e24d6931eb66132a297e081d4970b2bd1c7e18f32a04f49d13466a86f0401b6e0b769aed51d56ad9dda735a307973ee24d596ee9040fb0172cbb46c6a7464ce363a407a55f484d4c0fddbb7e5d426354949cb44ce90d7dea39fd0b3ae38900482154560c234b9e357090e1939136705176a382cee58dbb946c82da880cbb78e67f988e72752fc723e931a651fa5f7de4e765cedcd44ec8814af498375f4e80ea95d0911c0ecb498dec44b2afe70a22a2d10a0b6be1ca8c0f32695db8ae7189170301a6776ffa4ba794525b222f6cea8fad287a268088ef25529698ac950c9c6246cd7bc7d8a55c009a3ff4440a833e689d23ae2dc3ffc79e9b084d69e627348851a720141b6b7aa391873367bcdf4bab20ee1971a371b591803e0a34382c9b6eaf585160904abfec0b185937116b3c22048622231faf155de7cfe794a8aac2c4604abfd47bb67d3a62d757f00f0dc0d2d5a0600224655fec95d4f4055bf3ce39aeb489ba6ff8af590f9a02a7778c424a2f61f6ca77ec1b5b50a58e20f848665a70cc4223c23fb138c3ca5af84edf7ee2c1c9fedd5d30cd67fdc8686ce68f0f429ba6e7e59a04d2c6b9ef7e64fd6b0fa82ef8b3af82b1cdab38557c424f38044fe1c807c95f6ff3f9281f12e40f49dbb582b8a9cdc785818f9a667f2afc69963b8163a27fb587146bce77202a6a20e3e332f330e25b618502ed5ed068f62b02f88a521abffb578ae904aa4b3e0b784f243a7f5172a40a037d932faf544bbbffbffdb1ca55ea9af22dc309cb809fdad6b3bdd04d4aa9af02fae691acd8cf0ec65bb0c8e4d62712b725b426b4e4fa45ff37e45f65e1ffbc912cc077ea1aaf8c53a2203ed14b683890896b9ef23d760db1ebb8c6a7b3bf6395c3a07a20f2e793fa4dc0ca4f48a0e1c6f802854895b7372bb4b3deb647337356ddf40a91013e9bc2e286c96e5e26aa7cdc45b847c5af49e4a3de4ff3d0f317ef0bc4c42a61eefeb430fc8405d7fb21e63e3b1ae90d79bf8a7bf26396ec571a035f7c02a81f9f882f5a4d102b1efd8fa96bc141b87a897a4d7da0504076cd7e095f6066af7f78ea0a78b4c4103eaea4ef7247a00db77318cdd40295befb8a8867bd536163f9af948f5325e0f6c06df0b198d0ee51dec0354bace777d84aded9c045c45bb5618d3b3d1d80389726f005b09d3adbd6b75c0d77637f5ff5a7d6efb1532e018f9a0b2ecd50de0574814c796022b4f4dea7fafa38749039b075bd1eca10c776d32b69127c6043092638fe7e50a1dcfab1325e24b5ffd4e2ed6ff7b63eadc8e91af1407afb8bfe72b331feb1aeb8b54cfaa00ffe6e9782e6cb93c4869711b139bea2b87d839258680a62c8a270fea6c66ca2ee3148e392f24f7cc3167c37e3ca3ae156e01afb483587592c0853c72ad6faf7fe1e6af1244ced894ecaf7a63329ad9f0999bde8248735da7b9f44c24edecaaceb87923971677392ef7b5027c7c3e35df07767af9d0a5f1d6a7d828fdc664673438a49110cceadbe46ee804cff4f194d475670cc108af68dd2f3458ebde5852082701f6f10b01bf38776079efc0a43cce25f0601b6991ff1fe60d9b5fd79409b135b5207d02f78198b50f7f35163482963f9ba35255b8e9a0fb04c8d1a93f6720540c539319154d0e80179363288d38041257f66c8b8b91581afdbf3d47ccd143640b1e0eb6454b3ee8fde6e2fa066aa2c62a18ed6543234cb551003b0a37734b06a683b59ff1ccac55d661178c7b95335e97e08ade13af05d8a0f7fbd2b60f1198194ced9fe7dbbcc82e648d1bbd83893c101f1bb92ab1434cba73c5f7bee5ce8ee3d9b38175728f16aab09877940b9aa9fb78fbd763f6fb4d6b98b41b1d15d1c7bf35a1333f7b6386eddff918585e6fb73e5972237edaa4def59418db8caa2c895d4101c5001c30cdb52a5f56c64fe0b8de9d33420efca9776e84f3e09c2b6e4b03309977495a97a651d2c166072ef30a3ae78e7c6f0e5093de8c7e1a242095faea6a2acfea56c74cff511e9d0f484ae425d4672c8b744d5989eb41209402f8eb988ffc5bd608f0432020af56417d94304908fe55fe5a12c4eb292620e4861a464d732c786c9ef539666d77983cee1472dcbac4480371a4815ff420b29fa1878eae853eb9b5032a69c37d769d71da06b140d93408d307b6c7b3b9c94cc5ce737015983d786266f9accdc58761e1da7da6b809504437a20cb626851d0f31b2eeaf2824a810df20285300d9c567c92283d37763c8f9b8d23bf8b3508d68b7d8305656409e310c13c7544968d6a3a57d43c857df898512a7c63519ea183c0184f859ec65a3ba7b3df45e89eb0122166b32e4c5fd013f7920027fdf5fa925dd4b5797ab5bb47958537d48a8ae717fbf08a60d07bb62da38c785fb95eb3f66ff177f4ceb26ef78ebb3ebbdd369abe55d5238e95ba3f98e4af5ff0dee7008335ff2b35960b60bf5e7871f1244103f6ab37ab5b5f9afd8d5620d99f9f23816b70f6d4220c66fc3d99501f1bc24c31cbdeaa3c3df750b00ba4b0d2e1828f0b5437ec54e11df4f8f895411e0a4be96b3cfb76894ad98f2fd80abbf1c5aacf8dfced52ce1143a6da94210d3f7e3173e1198947501769fb302bbcfd4f8c94b0cac8b66daba9d205503a0c565aa6a5d307c4aec4104406561f9c8e24f5071c81f60959973fc27921b610ef7a1be70e5a261ac479c3ee3d2d84d07a1667b5ff74e061e47f832e22a673040badca6e05fc86801844cf295f11d7f33440d3262ecc179fe19db81f34e097072e669853b25f541f5a6dfc04dea2e68fe65853b4a32c74a4810cbad3c29e52b42e8d2ac40d0bfe61f6242fcee30ef327af4482afd9eb23a639b4975a010146fb33c394a895b00d5160f4a5178052d9c4f5de26b7ba765e3a0b0e39f5c6f6166e6c34b504e48c84706c10305871adda58de366d6dbcde4c79855c1bed220b57b6a1f90e882b824810cbcf99fbdcefeb5bcc3b56557d747f0b14a1bf3bffbce6cb7cefa4ebc46c19a2e657d9c0b76646de6b87c3d5e24168d32096fb129d8a2ea6c2febfc1e475f814270171ab430e25f98a10457e50602a1a35f263b67187af91c27d9c98c39bca5cf40cbdbaa55e350e912f6d56a40dd311fd9b49348d68f4e7b471b517bdbc3652f6b5da3e9d2d79e931abc9e9f253e31438aaf39aca38dd8e42c69e3c53543f960b353b073392b249462eb527b9089e5c35ac9ea9839f5588ade6190d39c1021e96c31467d5b82ee987ab224e0748a77c43d7e973caee496780339903ee5535b4102e9dceb0058ffa1ecb2493ece50fba709745c663d26c39d14f2791afc0d5f7b131b77a871f99add67a99adabaceeb8079ff1a662d82d84abec5718a2af3f5eb550dfb78cb0c88b7c4ed0267bd0c1508f3a38f7b4af5edb1f8a920ebf4e7e634aa9e1d5a1cd623861b4c369917171e666f512b4511da34606ca8e77f1317ab4618609cdb1a2b36c8f120a31498e6480caa0b68fc0f5994264ecd5122aabd181d60ee0508bad04830ca978d199b3c590ea3677545f533d69644d92d844186da78efb9931c84e0858a5aa7c9db033b523158e635dada697bdf7109dba244088b6a004d5fdbb5a928ac8800d47d95160e3bc4fe349486dbf5c501fffd5ae5b6802ea3fdcc715b07e30c0d4e83d3062f9b7c0cb025f6d02b9bd874890329feb4605df9f6529d557fa1c7d54ff017dd3660eac498bb97bce1acd706b232f5eb8fe4eadacb771f93b9d2262d2a3128f01e94b6cee46a5aea21f34c03153b5b200402d61bf92aaa48f083c118cf74fed0bc803bf659703e1f98304326f3ceeecd9823db500f1efa43c7870825c1f0bec713c8e5621c10989986d2f5b34fdce9d62304ad7a4606df506d304ca28c1b854927ef218d2207edab953c681cb6b5d4691c7ed915be1ba63854cc779aacbe2386e32a399f1b10ab977e0cbd642433f397a8fa930d24908bbe3b529ed646641c8f7528652ea396266b04246fb7e98ca0410a45799978d8076c157f0081a09f1289170a0acdedaa6fff33fc0f65f103b916ff904ecfcd235f11f4cffec3d704a3b3d477cb17e49e9c82bdfa702966139c27ff1fdd2c0b06171aab8a27893ba2b7806354126961f815f43a31e56fbd59167c5b6fa7909bdf6aa3d9c3effe5c5409ac2bab0c5a786f67c11c8d98c391ea610c203793477e01f227aa65a7fcc1de79bdb928adda6a753c8d2c1245cda75c2ba2bcff2de35d84eba5223ea7e2c5a789f5eb3bf84109b151d54e1f28e5c378006d2f5c99bf9a7c24b3df2b57a4535fdcfb8782ee2a41033d806cc53920721bd14b2"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000700)={0x0, 0x31, 0x1}, &(0x7f0000000140)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x0, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(r0, &(0x7f0000000140), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000001040)=""/4096, &(0x7f0000000100)=0x1000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 6: r0 = getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='syzkaller1\x00', 0x8001, 0x0, 0x81}) epoll_wait(r1, &(0x7f0000000200)=[{}, {}], 0x2, 0x10000) fcntl$setstatus(r1, 0x4, 0x6000) pread64(r1, &(0x7f0000001040)=""/4096, 0x1000, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='vboxnet1\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(r2, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x8000000, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000180)) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7, 0x0}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000007c0)={r4, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x5, 0x1, 0x1, 0x581cdd84, 0x7f}, 0x98) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)=0x5, 0x4) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") socket(0x1, 0x7, 0xda) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x100}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)=""/3, &(0x7f0000000140)=0x3) 2018/03/30 07:10:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000700)='/dev/net/tun\x00', 0x0, 0x4000000000400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vcan0\x00', 0xfffffffffffffff9}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 6: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x400000460340) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000180)) timer_create(0xfffffffffffffffd, &(0x7f0000000080)={0x0, 0x31, 0x1, @thr={&(0x7f0000000240)="95628f8e7daebe13eb2d11aefaaa65f216ec41d090117d209d982834e35c8578e48b9afdf771fadf7b83009078569e993240b00306c958ef9c62c0921c24821110c6edf7484fe09d911f19284d524fae38", &(0x7f0000000140)="cba87d3e394c004f5c44ec5c3aac5cef9d0b435429f4c103b7a3d0626c6dca719f45977a"}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r6) r7 = socket$netlink(0x10, 0x3, 0x0) syncfs(r7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{}]}, 0x10) 2018/03/30 07:10:28 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000100)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) pause() mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7, 0x0}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r5, 0x8}, 0x8) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x8080) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000180)=0xfffffffffffffce9) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000700)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{0x0, 0x2710}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x6, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000100)=0x3) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x40010400) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x200000000000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7, 0x0}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) sendmmsg$inet_sctp(r3, &(0x7f0000002040)=[{&(0x7f0000000100)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000700)="664384a4f4b04e38e86ffc5455c9605e56f4437c72ffe25c3fc1572f6a87c80456563fbb23071aff9c2f8ef85fe64974bfe1675244350bcda5cef371ddfd9b04a4", 0x41}], 0x1, &(0x7f00000007c0)=[@sndinfo={0x20, 0x84, 0x2, {0xfffffffffffff148, 0x800f, 0x6f4b, 0x9, r5}}, @sndrcv={0x30, 0x84, 0x1, {0xf8, 0x5a7, 0x4, 0x7, 0x8001, 0x9b, 0x9, 0xf3, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x1, 0x5, 0x3, r4}}, @init={0x18, 0x84, 0x0, {0x3, 0xfffffffffffffffc, 0x5, 0x8}}], 0xc0}, {&(0x7f0000000880)=@in6={0xa, 0x4e24, 0xf1, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="324941e404ff54ceaf707ad10ef2bb96bdfd0acfcb89a44605f7f0be89710606d8593171df77684b5b626e2775c3606d3c1362b582124c84d9", 0x39}, {&(0x7f0000000900)="e05523d5e38acb4a6a1177d0e44b350e85e9aad2a2bdc8fbcbe3df850dfa7e32914464f5435a126f32f92ee1e5ade9fd358c8ee0bac02834dfc574c94e92f7fa75ac1af9a6c29f717ef92f7f26411c946ee01fe5b79e16535d9487d835aa6cd32bdf3c42d2596f667920291d96474a5d6aac47ed34e64891e68c0e5fa076dd9f67b802327d", 0x85}, {&(0x7f00000009c0)="3b6e88d66dc8d793d4613f12a9e024c5d499730805171204b20b184042f4df2fd017fd7b17a61e3f26ff14c7f5681dc58487365d41501c713a515468c58057b045da238004e44dcf420da0cab461935c1839de111951ca2791121966c71b5e7a3c5c3322ad9e85fb08de833b032a01ee3fa48b9f523d81316ae057ca9476ca7d17c112d2f2d39ab92080ab65e35f562e7f54a24f5145c1f787255bc14ae5f009e905154fe6e04d27fb1c94408e8281597bb1983db286d95d37361dfc8b350f8a889236b9b746c091d957b46e7228104967", 0xd1}], 0x3, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x40, 0x1, 0x9, 0x400, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x1, 0xa, 0x4, 0x3, 0x60000000, 0x0, 0x0, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x7fff, 0x1f, 0x20d, 0x1, 0x8, 0x3, 0x9, 0xca, r4}}], 0x90, 0x4}, {&(0x7f0000000bc0)=@in6={0xa, 0x4e24, 0x0, @empty, 0x7252bc47}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000c00)="f79bb6ddd73b72662c4afc75c41b41f4182bbd418bb943f0fea56ca88912e5af67f32519179e16a998138354f61d00b53cc99517175707e2fad9b58eba96ecd83de6858d9a4766", 0x47}], 0x1, &(0x7f0000000cc0)=[@sndrcv={0x30, 0x84, 0x1, {0x594, 0x4, 0x20e, 0x5, 0x5, 0xbf7, 0xff, 0xd6, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x8000, 0x3, 0xb, 0x6, 0x5, 0xffffffffffff7da9, 0x7, 0x0, r5}}], 0x60, 0x20000000}, {&(0x7f0000000d40)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)="b6d95019cabce05fb9fc54a7b49fa05b2144cb3a3134e936720c7ed3f1dfd8a5d0998d284168179260c9575d3b629cdcec36dcf84de381b0854a4c094c8465cedc3e4c1f4f6df6af7ed33f5938ebb4815ab71537b22f6a7f26070b10f335d9c9ecac6d5fb5f17493f0ce793173c2d2f1956d48e728474fe3fb", 0x79}, {&(0x7f0000000e00)="b6811f570cd73c581ce8e01c69c091c548551b5757fa7a3f0a3f5328dd788ef43445603452de9856d84b2bc71e945eeaa82b", 0x32}, {&(0x7f0000001040)="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", 0x1000}], 0x3, &(0x7f0000000e80)=[@sndinfo={0x20, 0x84, 0x2, {0x101c, 0x8000, 0x20000000000, 0x0, r4}}, @init={0x18, 0x84, 0x0, {0x4, 0x7, 0x226, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x204, 0x3, 0x9, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x10001, 0x4, 0x7, 0x10000, 0x8, 0x101, 0x19e38f13, r4}}], 0xc0, 0x24008854}], 0x4, 0x4000000) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r14) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r9}, 0x10) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=0x0) getpriority(0x3, r10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x17) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x31, 0x2}, &(0x7f0000000700)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = socket$netlink(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="260000002a0047ffdf08dfff0000e8ffff00000001000000bd93085866d882bb020a75000000", 0x26) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000100), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$TIOCNOTTY(r5, 0x5422) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) ppoll(&(0x7f0000000100)=[{r3, 0x40}, {r5}, {r3, 0x4005}, {r2, 0x8008}, {r1, 0x442}, {r4, 0x1025}, {r5, 0x300}], 0x7, &(0x7f0000000140), &(0x7f0000000700)={0x1}, 0x8) 2018/03/30 07:10:28 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x3, &(0x7f0000000700)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000740)='/dev/net/tun\x00', 0x0, 0x3ffffc) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0xffffffffffffffff, &(0x7f0000000180)) clock_gettime(0x5, &(0x7f00000007c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000140)={'gre0\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) 2018/03/30 07:10:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="c4b7bf8216bd3083fe37a589cbc50cc0284363e31e65a20162aa693790a051f92d3ef7fdbef38d286d18eda986579b6a2b6bb5a82650168744f3d22dcfda3a2a50f1b67a048f078b7ba8248991be8bd647cfad62679488e0a6edc39074b1207fba22b5f611ce938a22650f42f1a29228efb12eaa5190ef9803f09d2720e4fe1f745190db3c78f7817831898d756aa1aa174e20f4f9491fb83bf985947e98fc5a1f8ec35db304f2080f573fe5fc659c547420ff1b222a41daaf851512c3be7c45e24d6931eb66132a297e081d4970b2bd1c7e18f32a04f49d13466a86f0401b6e0b769aed51d56ad9dda735a307973ee24d596ee9040fb0172cbb46c6a7464ce363a407a55f484d4c0fddbb7e5d426354949cb44ce90d7dea39fd0b3ae38900482154560c234b9e357090e1939136705176a382cee58dbb946c82da880cbb78e67f988e72752fc723e931a651fa5f7de4e765cedcd44ec8814af498375f4e80ea95d0911c0ecb498dec44b2afe70a22a2d10a0b6be1ca8c0f32695db8ae7189170301a6776ffa4ba794525b222f6cea8fad287a268088ef25529698ac950c9c6246cd7bc7d8a55c009a3ff4440a833e689d23ae2dc3ffc79e9b084d69e627348851a720141b6b7aa391873367bcdf4bab20ee1971a371b591803e0a34382c9b6eaf585160904abfec0b185937116b3c22048622231faf155de7cfe794a8aac2c4604abfd47bb67d3a62d757f00f0dc0d2d5a0600224655fec95d4f4055bf3ce39aeb489ba6ff8af590f9a02a7778c424a2f61f6ca77ec1b5b50a58e20f848665a70cc4223c23fb138c3ca5af84edf7ee2c1c9fedd5d30cd67fdc8686ce68f0f429ba6e7e59a04d2c6b9ef7e64fd6b0fa82ef8b3af82b1cdab38557c424f38044fe1c807c95f6ff3f9281f12e40f49dbb582b8a9cdc785818f9a667f2afc69963b8163a27fb587146bce77202a6a20e3e332f330e25b618502ed5ed068f62b02f88a521abffb578ae904aa4b3e0b784f243a7f5172a40a037d932faf544bbbffbffdb1ca55ea9af22dc309cb809fdad6b3bdd04d4aa9af02fae691acd8cf0ec65bb0c8e4d62712b725b426b4e4fa45ff37e45f65e1ffbc912cc077ea1aaf8c53a2203ed14b683890896b9ef23d760db1ebb8c6a7b3bf6395c3a07a20f2e793fa4dc0ca4f48a0e1c6f802854895b7372bb4b3deb647337356ddf40a91013e9bc2e286c96e5e26aa7cdc45b847c5af49e4a3de4ff3d0f317ef0bc4c42a61eefeb430fc8405d7fb21e63e3b1ae90d79bf8a7bf26396ec571a035f7c02a81f9f882f5a4d102b1efd8fa96bc141b87a897a4d7da0504076cd7e095f6066af7f78ea0a78b4c4103eaea4ef7247a00db77318cdd40295befb8a8867bd536163f9af948f5325e0f6c06df0b198d0ee51dec0354bace777d84aded9c045c45bb5618d3b3d1d80389726f005b09d3adbd6b75c0d77637f5ff5a7d6efb1532e018f9a0b2ecd50de0574814c796022b4f4dea7fafa38749039b075bd1eca10c776d32b69127c6043092638fe7e50a1dcfab1325e24b5ffd4e2ed6ff7b63eadc8e91af1407afb8bfe72b331feb1aeb8b54cfaa00ffe6e9782e6cb93c4869711b139bea2b87d839258680a62c8a270fea6c66ca2ee3148e392f24f7cc3167c37e3ca3ae156e01afb483587592c0853c72ad6faf7fe1e6af1244ced894ecaf7a63329ad9f0999bde8248735da7b9f44c24edecaaceb87923971677392ef7b5027c7c3e35df07767af9d0a5f1d6a7d828fdc664673438a49110cceadbe46ee804cff4f194d475670cc108af68dd2f3458ebde5852082701f6f10b01bf38776079efc0a43cce25f0601b6991ff1fe60d9b5fd79409b135b5207d02f78198b50f7f35163482963f9ba35255b8e9a0fb04c8d1a93f6720540c539319154d0e80179363288d38041257f66c8b8b91581afdbf3d47ccd143640b1e0eb6454b3ee8fde6e2fa066aa2c62a18ed6543234cb551003b0a37734b06a683b59ff1ccac55d661178c7b95335e97e08ade13af05d8a0f7fbd2b60f1198194ced9fe7dbbcc82e648d1bbd83893c101f1bb92ab1434cba73c5f7bee5ce8ee3d9b38175728f16aab09877940b9aa9fb78fbd763f6fb4d6b98b41b1d15d1c7bf35a1333f7b6386eddff918585e6fb73e5972237edaa4def59418db8caa2c895d4101c5001c30cdb52a5f56c64fe0b8de9d33420efca9776e84f3e09c2b6e4b03309977495a97a651d2c166072ef30a3ae78e7c6f0e5093de8c7e1a242095faea6a2acfea56c74cff511e9d0f484ae425d4672c8b744d5989eb41209402f8eb988ffc5bd608f0432020af56417d94304908fe55fe5a12c4eb292620e4861a464d732c786c9ef539666d77983cee1472dcbac4480371a4815ff420b29fa1878eae853eb9b5032a69c37d769d71da06b140d93408d307b6c7b3b9c94cc5ce737015983d786266f9accdc58761e1da7da6b809504437a20cb626851d0f31b2eeaf2824a810df20285300d9c567c92283d37763c8f9b8d23bf8b3508d68b7d8305656409e310c13c7544968d6a3a57d43c857df898512a7c63519ea183c0184f859ec65a3ba7b3df45e89eb0122166b32e4c5fd013f7920027fdf5fa925dd4b5797ab5bb47958537d48a8ae717fbf08a60d07bb62da38c785fb95eb3f66ff177f4ceb26ef78ebb3ebbdd369abe55d5238e95ba3f98e4af5ff0dee7008335ff2b35960b60bf5e7871f1244103f6ab37ab5b5f9afd8d5620d99f9f23816b70f6d4220c66fc3d99501f1bc24c31cbdeaa3c3df750b00ba4b0d2e1828f0b5437ec54e11df4f8f895411e0a4be96b3cfb76894ad98f2fd80abbf1c5aacf8dfced52ce1143a6da94210d3f7e3173e1198947501769fb302bbcfd4f8c94b0cac8b66daba9d205503a0c565aa6a5d307c4aec4104406561f9c8e24f5071c81f60959973fc27921b610ef7a1be70e5a261ac479c3ee3d2d84d07a1667b5ff74e061e47f832e22a673040badca6e05fc86801844cf295f11d7f33440d3262ecc179fe19db81f34e097072e669853b25f541f5a6dfc04dea2e68fe65853b4a32c74a4810cbad3c29e52b42e8d2ac40d0bfe61f6242fcee30ef327af4482afd9eb23a639b4975a010146fb33c394a895b00d5160f4a5178052d9c4f5de26b7ba765e3a0b0e39f5c6f6166e6c34b504e48c84706c10305871adda58de366d6dbcde4c79855c1bed220b57b6a1f90e882b824810cbcf99fbdcefeb5bcc3b56557d747f0b14a1bf3bffbce6cb7cefa4ebc46c19a2e657d9c0b76646de6b87c3d5e24168d32096fb129d8a2ea6c2febfc1e475f814270171ab430e25f98a10457e50602a1a35f263b67187af91c27d9c98c39bca5cf40cbdbaa55e350e912f6d56a40dd311fd9b49348d68f4e7b471b517bdbc3652f6b5da3e9d2d79e931abc9e9f253e31438aaf39aca38dd8e42c69e3c53543f960b353b073392b249462eb527b9089e5c35ac9ea9839f5588ade6190d39c1021e96c31467d5b82ee987ab224e0748a77c43d7e973caee496780339903ee5535b4102e9dceb0058ffa1ecb2493ece50fba709745c663d26c39d14f2791afc0d5f7b131b77a871f99add67a99adabaceeb8079ff1a662d82d84abec5718a2af3f5eb550dfb78cb0c88b7c4ed0267bd0c1508f3a38f7b4af5edb1f8a920ebf4e7e634aa9e1d5a1cd623861b4c369917171e666f512b4511da34606ca8e77f1317ab4618609cdb1a2b36c8f120a31498e6480caa0b68fc0f5994264ecd5122aabd181d60ee0508bad04830ca978d199b3c590ea3677545f533d69644d92d844186da78efb9931c84e0858a5aa7c9db033b523158e635dada697bdf7109dba244088b6a004d5fdbb5a928ac8800d47d95160e3bc4fe349486dbf5c501fffd5ae5b6802ea3fdcc715b07e30c0d4e83d3062f9b7c0cb025f6d02b9bd874890329feb4605df9f6529d557fa1c7d54ff017dd3660eac498bb97bce1acd706b232f5eb8fe4eadacb771f93b9d2262d2a3128f01e94b6cee46a5aea21f34c03153b5b200402d61bf92aaa48f083c118cf74fed0bc803bf659703e1f98304326f3ceeecd9823db500f1efa43c7870825c1f0bec713c8e5621c10989986d2f5b34fdce9d62304ad7a4606df506d304ca28c1b854927ef218d2207edab953c681cb6b5d4691c7ed915be1ba63854cc779aacbe2386e32a399f1b10ab977e0cbd642433f397a8fa930d24908bbe3b529ed646641c8f7528652ea396266b04246fb7e98ca0410a45799978d8076c157f0081a09f1289170a0acdedaa6fff33fc0f65f103b916ff904ecfcd235f11f4cffec3d704a3b3d477cb17e49e9c82bdfa702966139c27ff1fdd2c0b06171aab8a27893ba2b7806354126961f815f43a31e56fbd59167c5b6fa7909bdf6aa3d9c3effe5c5409ac2bab0c5a786f67c11c8d98c391ea610c203793477e01f227aa65a7fcc1de79bdb928adda6a753c8d2c1245cda75c2ba2bcff2de35d84eba5223ea7e2c5a789f5eb3bf84109b151d54e1f28e5c378006d2f5c99bf9a7c24b3df2b57a4535fdcfb8782ee2a41033d806cc53920721bd14b2"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 4: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(r0, &(0x7f0000000080), 0x1cc, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x249, &(0x7f00000002c0)={0x81, 0x0, 0x9, 0x5, 0x5, 0x23, 0x10000000200, 0xfffffffffffffffe}, &(0x7f0000000200)={0x1f, 0x9, 0x3, 0x9, 0x100000001f, 0x0, 0x491, 0x1}, &(0x7f00000007c0)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340)={0x1}, 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000700), &(0x7f0000000540)=0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x30, r2, 0x0) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) ioctl$sock_SIOCGIFCONF(r4, 0x8910, &(0x7f0000000640)=@req={0x28, &(0x7f0000000800)={'syz_tun\x00', @ifru_ivalue=0x100000000}}) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) ioctl(0xffffffffffffffff, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r1, 0xf, &(0x7f00000004c0)={0x0, r7}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000600)=0x57, 0x8) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{r11, r12/1000+10000}, 0x2, 0x8, 0x7803}, {{}, 0x22, 0x5, 0x3a3d}, {{r5, r6/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x1ff) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 6: gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000180)=0x0) r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000140)=0xfffffffffffffdc4) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x5, &(0x7f0000000740)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x8000ff, 0x0, 0x0, 0x8000000008}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:28 executing program 3: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x9320}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x3, @local={0xac, 0x14, 0x14, 0xaa}}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x800000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0xf2, 0x71f}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000740)={r5, 0x801}, &(0x7f00000007c0)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x8000000000000005, &(0x7f0000000540)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1, @thr={&(0x7f0000000180)="44783b32e4cf96e1c8aeba7b7c9f5cb4cc68b40d9567f1", &(0x7f0000000800)}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r14) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0xc48, 0x0, 0x800, 0x56b1, 0x2, 0x3}) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x6000}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7, 0x0}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000007c0)={r5, 0x40, 0x2, 0x0, 0x7, 0x8, 0x7e02, 0x3, {r4, @in6={{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x80000001}}, 0x6, 0xffffffffffff8000, 0x186a, 0x1, 0x3}}, &(0x7f0000000140)=0xb0) write$evdev(r6, &(0x7f00000001c0)=[{{r7, r8/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r9, r10/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r11, r12/1000+30000}}, {{0x0, r13/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r6, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000100)={0x14, 0x6, 0x6}, 0xc) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x333, 0xd9e, 0xfffffffffffffffd, 0x8, 0x7}, 0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2, &(0x7f0000000740)="3f40e5a99b1709663dad9e6942f203adbfa6ea73d3e24b6a7c7ea8fd6aae22f1b2cfa643a0568e6bc72ea16481ce99162e") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r10) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x7, 0x81, 0x9, 0x21, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {}, {{0x0, r9/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r2, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000700)=@req3={0x1ff, 0xffffffff80000000, 0x7, 0x1, 0x3, 0xd5, 0x9}, 0x1c) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r7 = socket$l2tp(0x18, 0x1, 0x1) r8 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r9}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x17) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000000)="d43f77d653fa3da00e5c73019d68e3bc43872220100379544245", 0x1a) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) recvfrom$llc(r5, &(0x7f0000001580)=""/4096, 0x1000, 0x120, &(0x7f0000000040)={0x1a, 0x33b, 0x100000000, 0x1, 0x39355be3, 0x2d, @random="1b5e5dd8f8a9"}, 0x10) 2018/03/30 07:10:29 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r8}, 0x10) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 6: r0 = getpgrp(0xffffffffffffffff) r1 = getpgid(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x66}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x280405) r4 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000007000/0x3000)=nil, 0x3000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x3, &(0x7f0000000740)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000700)=0x78) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'gretap0\x00', 0x400}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01001c00", @ANYRES32=0x0], &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={r8, 0x9fc}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r9}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000000140)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000003000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x0, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={"7379ccb2e9184d00000000e0c3b00040", {0x2, 0x0, @broadcast=0xffffffff}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000040)={0x601d, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000140)={0x7fffffff, r9}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(r0, &(0x7f0000000700), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) timer_getoverrun(r12) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000740)={0x2, 0x40, 0x81, 0x9, 0x1f, 0x10003}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x7, r4}, &(0x7f0000000700)=0x1a1) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r5, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r13) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000006c0)={0x0, 0x80, 0x40000000000081, 0x9, 0x0, 0x3}) write$evdev(r5, &(0x7f00000001c0)=[{{r6, r7/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r8, r9/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r10, r11/1000+30000}}, {{0x0, r12/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r5, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x1000}, {r2, 0x8501}, {r2}, {r3, 0x2008}, {r0, 0x1100}], 0x366, 0x0) r4 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r4, &(0x7f0000000380)='./file1\x00', 0x6) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000002c0)=0xff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x80) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x80) r8 = socket$l2tp(0x18, 0x1, 0x1) r9 = dup2(r8, r7) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000880)={0x80000001, 0x206, 0x0, 0x6, r10}, 0x10) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0xcb7, &(0x7f00000008c0)="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"}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x17) connect$l2tp(r8, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0), &(0x7f00000002c0)=0x8) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") sched_getattr(r0, &(0x7f0000000100), 0x30, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) ptrace$peek(0x2, r0, &(0x7f0000000140)) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000700)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000740)=0x0) r1 = getpgid(r0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r5 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r5, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000940)={r6}, &(0x7f0000000980)=0xfffffffffffffd25) prctl$setptracer(0x59616d61, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r1, &(0x7f00000000c0), 0xfffffffffffffe46, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r7 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000000140)="c2") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x1000008099, 0x45dc4e833109bb3) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r15) ioctl$DRM_IOCTL_INFO_BUFS(r7, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r7, &(0x7f00000001c0)=[{{r8, r9/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r10, r11/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r12, r13/1000+30000}}, {{0x0, r14/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r7, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x1, 0xffff, 0x7fffffff}, 0x1e8) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 6: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1}], 0x20000000000000b5, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x400089, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') mknodat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x2) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000366000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x801, 0x0) clone(0x0, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = mq_open(&(0x7f0000000640)='-$\x00', 0x0, 0x6, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xa00}, &(0x7f0000000840)=0x8) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f00000008c0)}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)) syncfs(0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x17) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f00000002c0)=0x0) timer_getoverrun(r11) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x0, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r4, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7803}, {{}, 0x3, 0x5, 0x3a3d}, {{r7, r8/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r9, r10/1000+30000}}, {{0x0, r11/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r4, &(0x7f0000000680)='syz1\x00', 0x1ff) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 2018/03/30 07:10:29 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x400000) r2 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f00000004c0), &(0x7f0000000500)) sched_getattr(0x0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, 0x5, 0x1f, 0x200}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x491}, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) unshare(0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x80000001) prctl$setptracer(0x59616d61, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x0, 0x0, 0x7}, &(0x7f00000005c0)=0x10) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) write$selinux_validatetrans(r3, &(0x7f0000000700)={'system_u:object_r:syslogd_exec_t:s0', 0x20, 'system_u:object_:chkpwd_exec_t:S0\x00', 0x20, 0x37, 0x36, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0xffffff4c) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000980)=""/52) ioctl(r3, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_getoverrun(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000006c0)={0x2, 0x0, 0x81, 0x9, 0x1f, 0x3}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+30000}, 0x1, 0x100000000}, {{}, 0x334, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{0x77359400}, 0x2, 0x8, 0x7806}, {{}, 0x3, 0x5, 0x3a3d}, {{r6, r7/1000+10000}, 0x4, 0x0, 0x4}, {{}, 0x20, 0x0, 0x5}, {{r8, r9/1000+30000}}, {{0x0, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xd8) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000140)=""/42, 0x2a}], 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x6, 0x0, 0x1}, 0x10) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) [ 197.545420] sg_write: data in/out 1969188161/2147479504 bytes for SCSI command 0x73-- guessing data in; [ 197.545420] program syz-executor4 not setting count and/or reply_len properly [ 197.564126] ================================================================== [ 197.571510] BUG: KASAN: wild-memory-access in sg_read+0x12c5/0x1470 [ 197.577902] Read of size 13 at addr ffe70873f94ab000 by task syz-executor4/22764 [ 197.585414] [ 197.587033] CPU: 0 PID: 22764 Comm: syz-executor4 Not tainted 4.9.91-gbb94f9d #68 [ 197.594630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.603958] ffff8800ae60f9c8 ffffffff81d95169 ffe70873f94ab000 000000000000000d [ 197.611937] 0000000000000000 ffff8800b6dfdde0 ffff8800ae6a4340 ffff8800ae60fa10 [ 197.619910] ffffffff8153da42 ffffffff8266be75 0000000000000282 9130b8aa784b6602 [ 197.627881] Call Trace: [ 197.630447] [] dump_stack+0xc1/0x128 [ 197.635783] [] kasan_report+0x162/0x380 [ 197.641380] [] ? sg_read+0x12c5/0x1470 [ 197.646885] [] check_memory_region+0x137/0x190 [ 197.653084] [] kasan_check_read+0x11/0x20 [ 197.658850] [] sg_read+0x12c5/0x1470 [ 197.664186] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 197.670823] [] ? fsnotify+0x86/0xf30 [ 197.676158] [] ? fsnotify+0xf30/0xf30 [ 197.681580] [] ? avc_policy_seqno+0x9/0x20 [ 197.687434] [] do_loop_readv_writev.part.17+0xc8/0x2b0 [ 197.694333] [] do_readv_writev+0x5fd/0x740 [ 197.700186] [] ? vfs_write+0x530/0x530 [ 197.705694] [] ? exit_robust_list+0x230/0x230 [ 197.711812] [] ? __fget+0x231/0x3b0 [ 197.717055] [] ? __fget+0x47/0x3b0 [ 197.722215] [] vfs_readv+0x84/0xc0 [ 197.727373] [] do_readv+0xe6/0x250 [ 197.732533] [] ? vfs_readv+0xc0/0xc0 [ 197.737867] [] ? SyS_mknod+0x420/0x420 [ 197.743374] [] SyS_readv+0x27/0x30 [ 197.748534] [] ? rw_copy_check_uvector+0x2c0/0x2c0 [ 197.755083] [] do_syscall_64+0x1a4/0x490 [ 197.760765] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 197.767656] ================================================================== [ 197.774981] Disabling lock debugging due to kernel taint [ 197.785695] Kernel panic - not syncing: panic_on_warn set ... [ 197.785695] [ 197.793062] CPU: 0 PID: 22764 Comm: syz-executor4 Tainted: G B 4.9.91-gbb94f9d #68 [ 197.801875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.811200] ffff8800ae60f8e8 ffffffff81d95169 ffffffff84197d57 ffff8800ae60f9c0 [ 197.819170] 0000000000000000 ffff8800b6dfdde0 ffff8800ae6a4340 ffff8800ae60f9b0 [ 197.827150] ffffffff8142e7f1 0000000041b58ab3 ffffffff8418b7b0 ffffffff8142e635 [ 197.835125] Call Trace: [ 197.837685] [] dump_stack+0xc1/0x128 [ 197.843020] [] panic+0x1bc/0x3a8 [ 197.848005] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 197.856204] [] ? preempt_schedule+0x25/0x30 [ 197.862142] [] ? ___preempt_schedule+0x16/0x18 [ 197.868346] [] kasan_end_report+0x50/0x50 [ 197.874111] [] kasan_report+0x16b/0x380 [ 197.879701] [] ? sg_read+0x12c5/0x1470 [ 197.885211] [] check_memory_region+0x137/0x190 [ 197.891412] [] kasan_check_read+0x11/0x20 [ 197.897181] [] sg_read+0x12c5/0x1470 [ 197.902522] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 197.909154] [] ? fsnotify+0x86/0xf30 [ 197.914484] [] ? fsnotify+0xf30/0xf30 [ 197.919911] [] ? avc_policy_seqno+0x9/0x20 [ 197.925766] [] do_loop_readv_writev.part.17+0xc8/0x2b0 [ 197.932666] [] do_readv_writev+0x5fd/0x740 [ 197.938523] [] ? vfs_write+0x530/0x530 [ 197.944029] [] ? exit_robust_list+0x230/0x230 [ 197.950146] [] ? __fget+0x231/0x3b0 [ 197.955395] [] ? __fget+0x47/0x3b0 [ 197.960569] [] vfs_readv+0x84/0xc0 [ 197.965737] [] do_readv+0xe6/0x250 [ 197.970898] [] ? vfs_readv+0xc0/0xc0 [ 197.976231] [] ? SyS_mknod+0x420/0x420 [ 197.981735] [] SyS_readv+0x27/0x30 [ 197.986896] [] ? rw_copy_check_uvector+0x2c0/0x2c0 [ 197.993444] [] do_syscall_64+0x1a4/0x490 [ 197.999129] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 198.006488] Dumping ftrace buffer: [ 198.010000] (ftrace buffer empty) [ 198.013680] Kernel Offset: disabled [ 198.017275] Rebooting in 86400 seconds..