INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2018/04/05 19:44:55 fuzzer started 2018/04/05 19:44:55 dialing manager at 10.128.0.26:37359 syzkaller login: [ 37.412521] can: request_module (can-proto-0) failed. [ 37.421781] can: request_module (can-proto-0) failed. 2018/04/05 19:45:02 kcov=true, comps=true 2018/04/05 19:45:06 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001fff), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000002886)) waitid(0x0, 0x0, &(0x7f00000000c0), 0x4100000e, &(0x7f0000000000)) 2018/04/05 19:45:06 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000fc4000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000fc2f95)=""/107, &(0x7f0000090ffc)=0x2) 2018/04/05 19:45:06 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001200)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000011c0)={0xffffffff}, 0x106}}, 0x20) write$rdma_cm(r0, &(0x7f0000000140)=@resolve_route={0x4, 0x8, 0xfa00, {r1}}, 0x10) 2018/04/05 19:45:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:06 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6664001a000000") fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='8/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/05 19:45:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f00000fb000)={&(0x7f0000009000)={0x2, 0x6, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x7}, 0x10}, 0x1}, 0x0) 2018/04/05 19:45:06 executing program 5: io_setup(0x1, &(0x7f0000000000)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) accept$packet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={"77797a5f74756eb921f9848000", r2}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000c3bff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x1000, 0x4f42}, {0x80000006}]}, 0x10) sendto(r4, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback={0x0, 0x1}, 0x5}, 0x1c) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r7, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/04/05 19:45:06 executing program 6: mkdir(&(0x7f000084bff8)='./file0\x00', 0x0) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x800000000402, r1) exit(0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000b13ff2)='./file0/file0\x00', 0x0) dup3(r2, r0, 0x0) [ 42.241087] IPVS: ftp: loaded support on port[0] = 21 [ 42.247184] IPVS: ftp: loaded support on port[0] = 21 [ 42.263803] IPVS: ftp: loaded support on port[0] = 21 [ 42.285979] IPVS: ftp: loaded support on port[0] = 21 [ 42.291442] IPVS: ftp: loaded support on port[0] = 21 [ 42.316315] IPVS: ftp: loaded support on port[0] = 21 [ 42.328938] IPVS: ftp: loaded support on port[0] = 21 [ 42.332553] IPVS: ftp: loaded support on port[0] = 21 [ 45.342065] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.400122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.429429] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.487336] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.497664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.525220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.534795] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.672805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.220869] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.227062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.354458] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.360621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.383481] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.389695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.409549] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.415756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.428907] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.435036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.459893] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.466083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.480635] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.486723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.713227] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.719494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.731518] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.840007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.848742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.882894] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.891516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.951307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.970475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.161701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.208330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.214597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.228235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.341831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.349199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.361166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.392877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.399585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.408234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.426124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.432924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.446524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.456061] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.465390] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.471636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.480722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/05 19:45:16 executing program 5: capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000000c0)) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="04"]}) [ 51.503562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.521282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.537726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.557130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.582526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/05 19:45:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000012ff6)='./control\x00') renameat2(r0, &(0x7f0000000000)='./control\x00', r1, &(0x7f0000000040)='./control\x00', 0x2) 2018/04/05 19:45:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)={0x1, 0x0, [{0x200004b564d03, 0x0, 0x101}]}) 2018/04/05 19:45:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x2082cf40) close(r0) 2018/04/05 19:45:16 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000fc4000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000fc2f95)=""/107, &(0x7f0000090ffc)=0x2) 2018/04/05 19:45:16 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00008fc000)=0x8, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004acffc)={0x0, 0x6}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000a76000), 0x0) [ 51.727528] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.733798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.746524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/05 19:45:16 executing program 3: r0 = memfd_create(&(0x7f0000000040)='dev ', 0x2) write(r0, &(0x7f0000000000)="16", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_generic(0xa, 0x3, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000cc0)={@local, 0x0}, &(0x7f0000000d00)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000d40)={@mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x1, 0x0, 0x400, 0x14, 0x4000000, r2}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x6, &(0x7f0000000ff0), 0x1c2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x10, 0xffffffffffffffff, 0x12) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000380)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0xa4150, r3, 0x17) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={0x0, 0xff}, 0x8) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x178, 0x608200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000004c0)={@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, 0x5, 0x0, 0x1, 0x400, 0x0, 0x0, r6}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0x4000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x20, 0xdbdf, 0x9, 0x1, 0x0, 0x3, 0x0, {0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x10001, 0x9, 0x6, 0x20, 0x80}}, &(0x7f0000000600)=0xb0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000400)=&(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000640)={r7, 0xf94}, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x141241, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="0bf5430f000319", 0x7}], 0x1) 2018/04/05 19:45:16 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:17 executing program 0: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000002580)="55698b9c4192c6bb3bcfa6484c04b6f6e71ad062eda507c5e2dc1c2c31f55e8b1edd4456c856271305309f4e4907724fe26efd467908866bfb71ed0041e0548ceeec948359362df07da2e87c63ed46712e5db995ea333b042d88288c2530465c364131f2e2ba4badaf6f5e7c3b7740d4660e4fc4855007c9be343c63df3f9c8f6316007d2047e7e680ff586998191f6ef761fe868c7d97c1b4912847aec37af41d4e", 0xa2) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg$rds(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000002300)=""/209, 0xd1}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000002400)=""/237, 0xed}], 0x6, &(0x7f0000000140)=[@rdma_dest={0x18, 0x114, 0x2, {0x9b9a, 0x7f}}], 0x18, 0x8800}, 0x10) sendmsg$rds(r1, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000c65000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000180)=""/122, 0x7a}, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 2018/04/05 19:45:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="010100010000000000000000409d9256", 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001840)={0x100000000, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100, 0x7, 0x8000, 0x8, 0x46, &(0x7f0000001800)='ip6gre0\x00', 0x0, 0x21c0000000000000, 0x3}) r1 = accept$alg(r0, 0x0, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000180)=""/231, 0x230, &(0x7f0000000280)=""/195}}, 0xfee1) 2018/04/05 19:45:17 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:17 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000fc4000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000fc2f95)=""/107, &(0x7f0000090ffc)=0x2) 2018/04/05 19:45:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000f40)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000f00)={0xffffffff}, 0x13f}}, 0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) write$rdma_cm(r0, &(0x7f00000000c0)=@notify={0xf, 0x8, 0xfa00, {r1}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr, @in=@remote}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getpeername$packet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, 0xee75, 0x8001, 0x5, 0x3fc, 0x2, 0x0, r3}) 2018/04/05 19:45:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x0) 2018/04/05 19:45:17 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)={0x1, 0x0, [{0x200004b564d03, 0x0, 0x101}]}) [ 52.722450] QAT: Invalid ioctl [ 52.728294] QAT: Invalid ioctl 2018/04/05 19:45:17 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000fc4000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000fc2f95)=""/107, &(0x7f0000090ffc)=0x2) [ 52.769303] QAT: Invalid ioctl 2018/04/05 19:45:17 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:17 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:17 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x100000000, 0x2a2900) openat$cgroup_int(r1, &(0x7f0000000280)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000180)={0x24, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, @u32}, @typed={0x8, 0xe, @u32}]}, 0x24}, 0x1}, 0x0) mq_open(&(0x7f0000000000)='/dev/cuse\x00', 0x881, 0x0, &(0x7f0000000040)={0xfff, 0x1ff, 0x75, 0x9, 0x81, 0x0, 0x305, 0x101}) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0)={0x10}) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)}]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)=0x80000000, 0x4) write$fuse(r0, &(0x7f0000efff6a)=ANY=[@ANYBLOB="5a000000000000000100000000000000070000000046b23250f0f6065d86a61bf2b3b3bbb98251dc96a2b12578ee5f951cce67ed8f92384fa9fededdbf7b3a8d3b874662bb74e794b2e847ed46cd2e01d56f241542997458a321"], 0x5a) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x200102, 0x0) 2018/04/05 19:45:17 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "cb155d", 0x0, 0x2f, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "8df06558eb6a17d1"}}}}}}}, 0x0) 2018/04/05 19:45:17 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) 2018/04/05 19:45:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)={0x1, 0x0, [{0x200004b564d03, 0x0, 0x101}]}) 2018/04/05 19:45:17 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002380)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) sendmmsg$alg(r1, &(0x7f0000009ac0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001180)="d54a7f4c07cad9ec0e61a630f2171f0f885dc617b877e5dec636f5332bb7d9ea6ae2a44f1f9176da9f327177c99af6d86075c427118e1772ca624c0e1f794007649d7193712ce2ec05fed8636076e30a", 0x50}], 0x1, &(0x7f00000012c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/05 19:45:17 executing program 3: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mremap(&(0x7f0000b18000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a94000/0x1000)=nil) 2018/04/05 19:45:17 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000a80)="31c89f6c4ab15671df51aac08f6995dd0ac75da3c91b2842356e1eacb2f79b706b04dd0f1bb5d53cf43ce219af9c3585b820e4cef98604d4e5d11cab3020a3ec161201b6d91bff9210c776026f6b6fdbbd07069540aa8c81cf8ed5d737df425ade89e5a81c40d2a129fcf41053c604abdbab9e851fa14e23137a3fab59f95d1ee7d9134bbd", 0x85, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x80000001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x17a}, &(0x7f0000000200)=0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x118, 0x390, 0x390, 0x390, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/05 19:45:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1000000000001, 0x100000021, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040)="e5", &(0x7f0000000180)=""/108}, 0x18) r1 = socket(0x1, 0xa, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x6, 0x1, 0xffffffffffffff29, 0x8, 0x2, 0x6}, 0x3}, 0xa) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4) [ 53.050274] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:45:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) [ 53.295489] IPVS: ftp: loaded support on port[0] = 21 [ 53.807534] CUSE: info not properly terminated [ 53.848128] CUSE: info not properly terminated 2018/04/05 19:45:18 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)={0x1, 0x0, [{0x200004b564d03, 0x0, 0x101}]}) 2018/04/05 19:45:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="3e262e0f1b1c0f20e06635000004000f22e03e66660f204609d52e0f070f53f866b90d0900000f32bad004ec0f01d166b97e09000066b80000000066ba008000000f30", 0x43}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:18 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000000dff7)='/dev/rtc\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)=ANY=[], 0x0, &(0x7f0000001400)=[{&(0x7f0000002000)="5e9b6d6eda21aa4392a6823002d21dbb2eed093b9c", 0x15}], 0x1, &(0x7f0000001440)}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000001ffc)) 2018/04/05 19:45:18 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=ANY=[@ANYBLOB="0c63ebff"], 0x0, 0x0, &(0x7f0000005000)}) syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x40c, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001b80)='/dev/vcs#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x40101, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000740)={0x0}) r3 = mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000900)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001b40)={0x168, 0x0, &(0x7f00000009c0)=[@acquire_done={0x40106309, 0x0, 0x3}, @enter_looper={0x630c}, @release={0x40046306}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18, &(0x7f00000006c0)=[@flat={0x776a2a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000000680), 0x1, 0x4, 0x32}], &(0x7f0000000700)=[0x78, 0x28, 0x38]}, 0x200}}, @increfs_done={0x40106308, r2, 0x3}, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x28, &(0x7f00000007c0)=[@fda={0x66646185, 0x4, 0x4, 0xb}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x77622a85, 0xb, 0x0, 0x3}], &(0x7f0000000840)=[0x38, 0x68, 0x78, 0x38, 0x28]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000880)=[@flat={0x73682a85, 0x100, r3}], &(0x7f00000008c0)=[0x0, 0x48, 0x30, 0x30, 0x48]}, 0x48}}, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000940)=[@fd={0x66642a85, 0x0, r0}, @flat={0x77622a85, 0x100}], &(0x7f0000000980)=[0x78, 0x38, 0x78, 0x68, 0x48, 0x78]}}], 0x0, 0x0, &(0x7f0000000b40)}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) getpeername$llc(r6, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$TCXONC(r6, 0x540a, 0x200000000000) sendto$llc(r6, &(0x7f0000000240)="46640b5408bcff6ceeca95520d04b900a359afe80f0d235087bd9cdad0bd3d031b628265946df2d14d40fbd432ce853f6c203e02a03d0ad35178640712031a02ba0301dcbdbc9ee8762ff82eeaa5ef119ed5d7298afcab99369eaf019784d35abb31d798866b53b99f1ec7bd672bb7b3e5cda8a6223fe9d868b3fe04c31e61f1fe", 0x81, 0x0, &(0x7f0000000180)={0x1a, 0x33d, 0x3f, 0x1f, 0x3, 0x1, @random="14d8a81c3883"}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x6c, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303}, @request_death={0x400c630e, 0x2, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=[0x20, 0x38, 0x40]}}, @enter_looper={0x630c}], 0x23, 0x0, &(0x7f0000000040)="00eb59127c7bbcb1f890741881e3b9ba9897c842ad42d813c3b995a422d6468398bfd6"}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x1) 2018/04/05 19:45:18 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) 2018/04/05 19:45:18 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) [ 54.054339] binder: 5993:5995 unknown command -1350900 [ 54.079320] binder: 5993:5995 ioctl c0306201 20004000 returned -22 2018/04/05 19:45:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) [ 54.109120] binder: 5993:5995 Release 1 refcount change on invalid ref 1 ret -22 [ 54.141898] binder: 5993:5995 BC_FREE_BUFFER u0000000000000000 no match [ 54.146088] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:45:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000301000)={0x2, 0x0, @rand_addr=0x80000001}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) sendto(r0, &(0x7f0000000000)=':', 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)='\b', 0x1}], 0x1, &(0x7f00000008c0)}}], 0x1, 0x0) shutdown(r0, 0x1) [ 54.163300] binder: 5993:5995 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 54.186090] binder: 5993:5995 transaction failed 29189/-22, size 0-24 line 2848 [ 54.227778] binder_alloc: binder_alloc_mmap_handler: 5993 2000c000-20010000 already mapped failed -16 [ 54.259494] IPVS: ftp: loaded support on port[0] = 21 [ 54.286732] binder_alloc: binder_alloc_mmap_handler: 5993 2000d000-20010000 already mapped failed -16 [ 54.320696] binder: 5993:6020 Release 1 refcount change on invalid ref 1 ret -22 [ 54.349880] binder_alloc: binder_alloc_mmap_handler: 5993 2000c000-20010000 already mapped failed -16 [ 54.374767] binder: 5993:6020 BC_FREE_BUFFER u0000000000000000 no match [ 54.390893] binder: 5993:6020 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/04/05 19:45:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) 2018/04/05 19:45:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="3e262e0f1b1c0f20e06635000004000f22e03e66660f204609d52e0f070f53f866b90d0900000f32bad004ec0f01d166b97e09000066b80000000066ba008000000f30", 0x43}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 54.434345] binder: 5993:6020 transaction failed 29189/-22, size 0-24 line 2848 2018/04/05 19:45:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) 2018/04/05 19:45:19 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=ANY=[@ANYBLOB="0c63ebff"], 0x0, 0x0, &(0x7f0000005000)}) syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x40c, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001b80)='/dev/vcs#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x40101, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000740)={0x0}) r3 = mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000900)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001b40)={0x168, 0x0, &(0x7f00000009c0)=[@acquire_done={0x40106309, 0x0, 0x3}, @enter_looper={0x630c}, @release={0x40046306}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18, &(0x7f00000006c0)=[@flat={0x776a2a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000000680), 0x1, 0x4, 0x32}], &(0x7f0000000700)=[0x78, 0x28, 0x38]}, 0x200}}, @increfs_done={0x40106308, r2, 0x3}, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x28, &(0x7f00000007c0)=[@fda={0x66646185, 0x4, 0x4, 0xb}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x77622a85, 0xb, 0x0, 0x3}], &(0x7f0000000840)=[0x38, 0x68, 0x78, 0x38, 0x28]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000880)=[@flat={0x73682a85, 0x100, r3}], &(0x7f00000008c0)=[0x0, 0x48, 0x30, 0x30, 0x48]}, 0x48}}, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000940)=[@fd={0x66642a85, 0x0, r0}, @flat={0x77622a85, 0x100}], &(0x7f0000000980)=[0x78, 0x38, 0x78, 0x68, 0x48, 0x78]}}], 0x0, 0x0, &(0x7f0000000b40)}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) getpeername$llc(r6, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$TCXONC(r6, 0x540a, 0x200000000000) sendto$llc(r6, &(0x7f0000000240)="46640b5408bcff6ceeca95520d04b900a359afe80f0d235087bd9cdad0bd3d031b628265946df2d14d40fbd432ce853f6c203e02a03d0ad35178640712031a02ba0301dcbdbc9ee8762ff82eeaa5ef119ed5d7298afcab99369eaf019784d35abb31d798866b53b99f1ec7bd672bb7b3e5cda8a6223fe9d868b3fe04c31e61f1fe", 0x81, 0x0, &(0x7f0000000180)={0x1a, 0x33d, 0x3f, 0x1f, 0x3, 0x1, @random="14d8a81c3883"}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x6c, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303}, @request_death={0x400c630e, 0x2, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=[0x20, 0x38, 0x40]}}, @enter_looper={0x630c}], 0x23, 0x0, &(0x7f0000000040)="00eb59127c7bbcb1f890741881e3b9ba9897c842ad42d813c3b995a422d6468398bfd6"}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="0c52123e3525ead59ae2dc4dc04dca92cef93abec04708514260183d1229e9c9210d0306cafb71b919d30e66783771598d9c4c0642ff34945abf54e1a552d9cef106049bd8b96842d95b85ac54409fa3c091f735df262dec401bffcd0c81089b3c893e1a749fe0c1ca306ae506efe8b1c4bb7275587c45b9cc756e5ebc003cfa5c1b593dcb5a636d395aec823b0e7fd1d618df5776b221887c1a03ec879c000c969ac55f8ab139dfcd798541905741204769afaa856bc2ea318ceee763a4d56b03953a5d9de6c7d174d9ce13116719b04aca86202927bef6c002d17859ffff3409ad7087d461c35a956e2ac1b0391ee289542fd7d57703430b4818594e7be156a4c9bbd3eb2b626442db6a450f18fd96cac7a56c2b1441c6a1180a642a51916e229b2f13ecc8b794fda3b15d2fdda78ecd42f468f1a27534b247e53adbdc5dfcc0177a6d920e2203182d2bfaf3b7a73b9a572e0585a4a5ff27a3d42b7b9f5f79d4ddb982ac550cf3ea1256b82a3d661ab56adc26e4fadd9438dbdbfdb0343a3f84569e25ef5319c083314ff29dab6aed3bfe7c46628afd33bc9b60ae6e6beebbe88d6e622ef380d4966139a6fb1b3a06fc50712d4f04f45890b6418867dcd5ecb2ec59e43eb24b659a736cb17b7bbdca15a4d64e62d32def00000000000000021ee8d06e22b9f29f093b6a55da97dc3485505a7cb11a4c137b58b54f32aad0e6edde3e3f17abfb28e10000000000000000000000000000"], &(0x7f0000000100)=0x1) [ 54.530988] IPVS: ftp: loaded support on port[0] = 21 [ 54.543162] binder: undelivered TRANSACTION_ERROR: 29189 [ 54.563766] binder: undelivered TRANSACTION_ERROR: 29189 [ 54.586946] binder: 6034:6038 unknown command -1350900 [ 54.624169] binder: 6034:6038 ioctl c0306201 20004000 returned -22 [ 54.637688] IPVS: ftp: loaded support on port[0] = 21 [ 54.671888] binder: 6034:6038 Release 1 refcount change on invalid ref 1 ret -22 [ 54.691153] binder: 6034:6038 BC_FREE_BUFFER u0000000000000000 no match [ 54.710164] binder: 6034:6038 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/04/05 19:45:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) [ 54.730835] binder: 6034:6038 transaction failed 29189/-22, size 0-24 line 2848 [ 54.763293] binder_alloc: binder_alloc_mmap_handler: 6034 2000c000-20010000 already mapped failed -16 [ 54.836802] IPVS: ftp: loaded support on port[0] = 21 [ 54.892168] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:45:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="3e262e0f1b1c0f20e06635000004000f22e03e66660f204609d52e0f070f53f866b90d0900000f32bad004ec0f01d166b97e09000066b80000000066ba008000000f30", 0x43}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="84d5aef1603cb020c5b219faa757913ec85ee74a155e1d635566777b78600bc65bf01ce33de9a6bc3a2041890df0926f2cfc2a7d63690f6b55610593773041755f61b034e3a62a770855b2c0481df219efbfa8ffd0c665434a1de026bcfb654d597ef77a7b231aa9efe45c53811c7591d56f69e9c6231e6da993bbd2a6133805be0c18ba114cfe865e693024a56c3331b93c03e25927a504d27acebf7eecd33d7c69359e3ca37dc546c4fc5bc62596a94cdc00f9b973616a9d2ebad2d9b3e60261ae73b8397694e1f0851475b4236fb47989e6bfd1ad926a01523df3f689dc2603a76b5fc5e023d5449d066d424d1001fee5d653c21fdb751e", 0xf9}], 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x3f) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x80, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x0, 0x7, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000700)='/dev/sg#\x00', 0xfffffffffffffff7, 0x800) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc513ba8c8973cad0bd5926604846b7f5d0397b", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x100000000, 0x80000) rt_sigprocmask(0x3d738072cd0f41ac, &(0x7f0000000cc0)={0x7}, &(0x7f0000000d00), 0x8) clone(0x40000000, &(0x7f0000000500)="67cdd9994c47c31d325b069924a7064c157c2ec0b5b5dca2feeb7dabef3b7af0d02d559e293faa759f2b3cb12aea360c2d", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a00)="29859fdda9a119e54a27f9ec76b4d63a16dc5bbdd38c2fda0e5f4d8f830cd987ec7d3ffc66cf3db8820968fd89a1fba8fe6352a29a27f3b000bcdf238f2c04b358fc831025180e0be313da41de6366c94a1a0f86aaffdf2c039111b55275c054e14819a827fe809225249a01944263a2aec15f64e752e35892b1b8e7ef1e0e9115") ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000b80)={{0x4, 0x8}, 'port0\x00', 0x80, 0x40, 0x10000, 0x6, 0x2, 0x80, 0x8, 0x0, 0x0, 0x3dec00}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000c40)={r3, 0x6}, &(0x7f0000000c80)=0x8) clock_settime(0x7, &(0x7f0000000740)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x222081, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR, @ANYPTR]]]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x100000001, 0x0, 0x8, 0x0, 0x7, 0x401, 0x1f, r3}, 0x20) 2018/04/05 19:45:19 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=ANY=[@ANYBLOB="0c63ebff"], 0x0, 0x0, &(0x7f0000005000)}) syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x40c, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001b80)='/dev/vcs#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x40101, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000740)={0x0}) r3 = mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000900)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001b40)={0x168, 0x0, &(0x7f00000009c0)=[@acquire_done={0x40106309, 0x0, 0x3}, @enter_looper={0x630c}, @release={0x40046306}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18, &(0x7f00000006c0)=[@flat={0x776a2a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000000680), 0x1, 0x4, 0x32}], &(0x7f0000000700)=[0x78, 0x28, 0x38]}, 0x200}}, @increfs_done={0x40106308, r2, 0x3}, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x28, &(0x7f00000007c0)=[@fda={0x66646185, 0x4, 0x4, 0xb}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x77622a85, 0xb, 0x0, 0x3}], &(0x7f0000000840)=[0x38, 0x68, 0x78, 0x38, 0x28]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000880)=[@flat={0x73682a85, 0x100, r3}], &(0x7f00000008c0)=[0x0, 0x48, 0x30, 0x30, 0x48]}, 0x48}}, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000940)=[@fd={0x66642a85, 0x0, r0}, @flat={0x77622a85, 0x100}], &(0x7f0000000980)=[0x78, 0x38, 0x78, 0x68, 0x48, 0x78]}}], 0x0, 0x0, &(0x7f0000000b40)}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) getpeername$llc(r6, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$TCXONC(r6, 0x540a, 0x200000000000) sendto$llc(r6, &(0x7f0000000240)="46640b5408bcff6ceeca95520d04b900a359afe80f0d235087bd9cdad0bd3d031b628265946df2d14d40fbd432ce853f6c203e02a03d0ad35178640712031a02ba0301dcbdbc9ee8762ff82eeaa5ef119ed5d7298afcab99369eaf019784d35abb31d798866b53b99f1ec7bd672bb7b3e5cda8a6223fe9d868b3fe04c31e61f1fe", 0x81, 0x0, &(0x7f0000000180)={0x1a, 0x33d, 0x3f, 0x1f, 0x3, 0x1, @random="14d8a81c3883"}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x6c, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303}, @request_death={0x400c630e, 0x2, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=[0x20, 0x38, 0x40]}}, @enter_looper={0x630c}], 0x23, 0x0, &(0x7f0000000040)="00eb59127c7bbcb1f890741881e3b9ba9897c842ad42d813c3b995a422d6468398bfd6"}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x1) 2018/04/05 19:45:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/05 19:45:19 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:19 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0xc, 0x2) connect$ipx(r0, &(0x7f00000000c0)={0x4, 0x7, 0x2, "7690b547199a", 0x244}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000001600)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000100)) 2018/04/05 19:45:19 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:19 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) [ 55.174312] binder: 6068:6079 unknown command -1350900 [ 55.196533] binder: 6068:6079 ioctl c0306201 20004000 returned -22 [ 55.237245] binder: 6068:6079 Release 1 refcount change on invalid ref 1 ret -22 [ 55.246607] IPVS: ftp: loaded support on port[0] = 21 [ 55.252270] binder: 6068:6079 BC_FREE_BUFFER u0000000000000000 no match [ 55.259885] 9pnet_virtio: no channels available for device ./file0/file0 [ 55.274438] binder: 6068:6079 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 55.286415] 9pnet_virtio: no channels available for device ./file0/file0 [ 55.293659] binder: 6068:6079 transaction failed 29189/-22, size 0-24 line 2848 2018/04/05 19:45:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000100)=""/184, &(0x7f0000000040)=0xb8) getsockname$netrom(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r1, &(0x7f00009fc000), 0x5fa, 0x8000, &(0x7f0000357000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) [ 55.334160] binder_alloc: binder_alloc_mmap_handler: 6068 2000c000-20010000 already mapped failed -16 2018/04/05 19:45:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="3e262e0f1b1c0f20e06635000004000f22e03e66660f204609d52e0f070f53f866b90d0900000f32bad004ec0f01d166b97e09000066b80000000066ba008000000f30", 0x43}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:20 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=ANY=[@ANYBLOB="0c63ebff"], 0x0, 0x0, &(0x7f0000005000)}) syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x40c, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001b80)='/dev/vcs#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x40101, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000740)={0x0}) r3 = mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000900)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001b40)={0x168, 0x0, &(0x7f00000009c0)=[@acquire_done={0x40106309, 0x0, 0x3}, @enter_looper={0x630c}, @release={0x40046306}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18, &(0x7f00000006c0)=[@flat={0x776a2a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000000680), 0x1, 0x4, 0x32}], &(0x7f0000000700)=[0x78, 0x28, 0x38]}, 0x200}}, @increfs_done={0x40106308, r2, 0x3}, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x28, &(0x7f00000007c0)=[@fda={0x66646185, 0x4, 0x4, 0xb}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x77622a85, 0xb, 0x0, 0x3}], &(0x7f0000000840)=[0x38, 0x68, 0x78, 0x38, 0x28]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000880)=[@flat={0x73682a85, 0x100, r3}], &(0x7f00000008c0)=[0x0, 0x48, 0x30, 0x30, 0x48]}, 0x48}}, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000940)=[@fd={0x66642a85, 0x0, r0}, @flat={0x77622a85, 0x100}], &(0x7f0000000980)=[0x78, 0x38, 0x78, 0x68, 0x48, 0x78]}}], 0x0, 0x0, &(0x7f0000000b40)}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) getpeername$llc(r6, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$TCXONC(r6, 0x540a, 0x200000000000) sendto$llc(r6, &(0x7f0000000240)="46640b5408bcff6ceeca95520d04b900a359afe80f0d235087bd9cdad0bd3d031b628265946df2d14d40fbd432ce853f6c203e02a03d0ad35178640712031a02ba0301dcbdbc9ee8762ff82eeaa5ef119ed5d7298afcab99369eaf019784d35abb31d798866b53b99f1ec7bd672bb7b3e5cda8a6223fe9d868b3fe04c31e61f1fe", 0x81, 0x0, &(0x7f0000000180)={0x1a, 0x33d, 0x3f, 0x1f, 0x3, 0x1, @random="14d8a81c3883"}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x6c, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303}, @request_death={0x400c630e, 0x2, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=[0x20, 0x38, 0x40]}}, @enter_looper={0x630c}], 0x23, 0x0, &(0x7f0000000040)="00eb59127c7bbcb1f890741881e3b9ba9897c842ad42d813c3b995a422d6468398bfd6"}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x1) 2018/04/05 19:45:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 55.480137] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:45:20 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f000042b000), 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @random="914e632c6426"}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000ce4000)=0x1000000000007) 2018/04/05 19:45:20 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f000020c000)=[{{&(0x7f00009a5ff8)=@un=@abs, 0x8, &(0x7f0000cf5000), 0x0, &(0x7f000023bfc3)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f000082f000)={0x77359400}) connect$can_bcm(r0, &(0x7f0000002ff0)={0x1d}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x450, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000003000)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000003000)={0x5, 0x0, 0x0, 0x0, 0x7}, 0x38}, 0x1}, 0x0) [ 55.540418] binder: 6101:6105 unknown command -1350900 [ 55.585406] binder: 6101:6105 ioctl c0306201 20004000 returned -22 [ 55.629490] binder: 6101:6105 Release 1 refcount change on invalid ref 1 ret -22 [ 55.647320] binder: 6101:6105 BC_FREE_BUFFER u0000000000000000 no match [ 55.662210] binder: 6101:6105 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 55.681006] binder: 6101:6105 transaction failed 29189/-22, size 0-24 line 2848 [ 55.712498] binder_alloc: binder_alloc_mmap_handler: 6101 2000c000-20010000 already mapped failed -16 [ 55.820949] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:45:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000034f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000017c000)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, {@in6=@ipv4={[], [0xff, 0xff]}, 0xffffffffffffffff, 0x3c}, @in=@multicast1=0xe0000001, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/05 19:45:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) 2018/04/05 19:45:21 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:21 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000003080)="26fe6bbd22e1c516390d2def920057d19b8834c5f714cf28a5f622f9a64db7c134e76f50cc0e0ee56f0defcca50b1193fb7047512fe18f51719fca6026c58c80ff0b0bc389779cc6dcff86353e65b9762dc50a5f44059df2e170abc6589ac48030b9e1b75ebefea6b5e9ee4dc386ee149e41b0d09f970e0f4862943c663255f686e860dffa32d20315d40570c301459473fbc5b51a8f81294c94bfb8142f1d40e28bc2ead49285427defa78fd181e573d6ed4202fc5d64ba092871b02d3fd198324b586be690d6d97febc26f9742ebc4a38a6db3ed3f9d08dcb82c25b4c853552e41a477ceedb0756d7a5b7c174bda723937d18953d7c0be4b603f111170b45cc9fbf22d8f0885fbf1a6f23a9adef5b8a3cf13e86b34807c2d9723487e3b8361717fcd07fd6aaf0edc2c8fa91eb9f3d36cbb1079e7c4dd66eb55ad7078b8e1275b01fd4f526beac1475e5f118f3333a2e6f1ff16904a5b76469ea494e36846e6c48f8da5a8367354004210709bc18c191eb17e3553709cde12fec70be55916bffc9cff33c91f5adc2d0caacf2a707a65ee2c95df7c3140249fcf70c061f5523fbb6541c41cd0a0790932d5236b8c4f831c07456fa09f24e54407987b9b1ff3e53510eb5878708afe9967c45c176cc3dd8b350932ee08f90a543a1127d4e663afb0d5223c88915a7b7e62f95998b709ab23d4fe2130c5d20e01beb1042f1a1c0e809609422e18e08e663f0989ad66be15", 0x210}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) 2018/04/05 19:45:21 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f00000006c0)='./control\x00', &(0x7f0000000700)=@known='com.apple.system.Security\x00', &(0x7f0000000740)='+&*:[system\'wlan1-:lo\x00', 0x16, 0x0) rmdir(&(0x7f0000000400)='./control\x00') close(r0) 2018/04/05 19:45:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) accept(r0, 0x0, &(0x7f0000000080)) 2018/04/05 19:45:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f000038f000), 0x2c) 2018/04/05 19:45:21 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e970b56804b3747cc7"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/05 19:45:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) accept(r0, 0x0, &(0x7f0000000080)) 2018/04/05 19:45:21 executing program 3: syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/05 19:45:21 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 19:45:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0x0, 0x1}]}) 2018/04/05 19:45:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x0) [ 57.109199] bridge0: Invalid MTU 0 requested, hw min 68 2018/04/05 19:45:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) accept(r0, 0x0, &(0x7f0000000080)) 2018/04/05 19:45:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x1f}, 0x1c) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:22 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 19:45:22 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104fffffd3b54c007490000f30501000b000600000423ca0000cf", 0x1f) 2018/04/05 19:45:22 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) 2018/04/05 19:45:22 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x8040) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000180)) sendto$ax25(r0, &(0x7f00000001c0)="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", 0x1000, 0x800, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x2, 0x0, 0x5) lseek(r1, 0x0, 0x4) 2018/04/05 19:45:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f000000c000)={0x10, 0x34000}, 0xfe55, &(0x7f0000007ff0)={&(0x7f0000000040)={0x20, 0x2e, 0x821, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @uid}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 19:45:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x2276, 0x0) [ 57.645930] bridge0: Invalid MTU 0 requested, hw min 68 [ 57.668716] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/05 19:45:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) fcntl$setown(r0, 0x8, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f00001b1fff)='O', 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/05 19:45:22 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) [ 57.699811] openvswitch: netlink: Message has 4 unknown bytes. [ 57.731369] netlink: 'syz-executor5': attribute type 6 has an invalid length. 2018/04/05 19:45:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) accept(r0, 0x0, &(0x7f0000000080)) 2018/04/05 19:45:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="a2", 0x1) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x3a, &(0x7f0000000300)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, &(0x7f0000000100)=""/84, 0x54}}], 0x1, 0x0, &(0x7f00000058c0)={0x0, 0x1c9c380}) 2018/04/05 19:45:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00005aeff6)='net/icmp6\x00') readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/117, 0x75}, {&(0x7f0000001400)=""/164, 0xa4}], 0x2) 2018/04/05 19:45:22 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bridge0\x00'}) [ 57.818011] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 57.843248] netlink: 'syz-executor5': attribute type 6 has an invalid length. 2018/04/05 19:45:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="18000300000001000000be5efecd883600000802030000080000060063640002b900107401011c6900bb77a107567e5b07000000000000000097ec67a1e2040049fc2d63e0000000000014000a00000000130000c88ebbfd06010000ad000000000000061475d72203000700ecf48b05000000e7ec75e848ccfbf6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75a2af1b8fc393d2696b8c3ba5aea6096f201cd7eaf", 0xc0) [ 57.883316] bridge0: Invalid MTU 0 requested, hw min 68 2018/04/05 19:45:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="a2", 0x1) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x3a, &(0x7f0000000300)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, &(0x7f0000000100)=""/84, 0x54}}], 0x1, 0x0, &(0x7f00000058c0)={0x0, 0x1c9c380}) 2018/04/05 19:45:22 executing program 6: r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='gre0\x00', 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x3ff, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/05 19:45:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) close(r2) close(r3) 2018/04/05 19:45:22 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/05 19:45:22 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/91, 0x286) 2018/04/05 19:45:22 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) 2018/04/05 19:45:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000000000)=""/174) 2018/04/05 19:45:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) [ 58.135752] bridge0: Invalid MTU 0 requested, hw min 68 2018/04/05 19:45:23 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="f9e3a127be1d0953084fab7d2701417e", 0x10}], 0x1, &(0x7f0000001380)}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) 2018/04/05 19:45:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)) 2018/04/05 19:45:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="a2", 0x1) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x3a, &(0x7f0000000300)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, &(0x7f0000000100)=""/84, 0x54}}], 0x1, 0x0, &(0x7f00000058c0)={0x0, 0x1c9c380}) 2018/04/05 19:45:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60c", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000740)="7312c1a72ce67ebfde5fd3d7cdc5af48a53f60b5a4801632f1f64674acd8054a0f78b654a51136f624a6b44eaf0931fdb7c45c6e4fb7bbd3934d2fd853c583451ce424ba9daf8070", 0x48}], 0x1, &(0x7f00000013c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, &(0x7f0000000080)=""/107, 0x6b}, 0x0) 2018/04/05 19:45:23 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/04/05 19:45:23 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) 2018/04/05 19:45:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) 2018/04/05 19:45:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) 2018/04/05 19:45:23 executing program 6: madvise(&(0x7f000000e000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/04/05 19:45:23 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}, 0x0) 2018/04/05 19:45:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000b61000)={0x0, 0xb}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9effc), 0x2f2) sendto$inet6(r0, &(0x7f0000000240)='\x00}', 0x2, 0x0, &(0x7f00004b0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f00000012c0)="d110ba65b7f75f3d490ce4f580b9a8e466602500c4bedde7b95b8b1309ef6b0953fcd3d392874f04b07b56a0f888d8a4d40b540ea9b86b722de731a91bdae01b538a8d9485f86631ea498922a0fdd4538d17dbd42108bd275832b7bae632cbbe0a13286e6656072157be8ffaafa255609908422c269f85154df3c31e242951ba6c684863edaee20fac0101661c5639b054b7e191482b62bbd11c0c27ffe2383014c470fd5a343f499e2fa752fbc9d846488cfa88683169972c9b2cba01fd1f3f0dc8dff269a4e6fa7b7c9c76ee026fd26683e2df1c618052f0296aa25a31ab7b0900000000000000fb1dcdc5b96dfe571bac570bad40dde7dc0503419e9b2f8213e0ae46d5b4075b36275aa8af46960aedc633b9a97ef52b7e7e12e9a227d0c23369bccedc974a55af2d7790c2bf39837c1511ea5febaa61bd42dde9a4a403188163564309af92a02618a30007ffcb4a8a685665b631990b44329a7c7c13a65b075321fa60beaf72452f6e3d6cd2cfef46efb86ec4d814b5e973ba94fa786277d976921908ec861deed3778a46b544d381576e34e501fd82ce87e3f3873b826ade5dac485055c91d2aa6b04d4820705db77c41ccc5e7ffcab4b0efea4b4aecfe5a635401afdf583e5dcaae2e0f5c01f93052f0864074a8b18f3126ae4ae39565b4be459ae1fae8c2042cd46d7bc23091f16855f1d19153d74c3d892b4256dd74e6fe88ce2ea96beed8176e7cc0a06aed4f0673ad1c4719f781799e095317fdff6732281da438ca3f293ec6e26750eeb9b67382cc35c897cd56e5c1011e6e93a0a7d366d057642e8d0946ed29a88014dfe573adf460a74fdc9b9dc35ad91086b0425fb6a3ff3d7e01c5eb4361e373cc5bcb12ffe2191a3a864f1fd947c0cfa2c3d877087375546b55e1fb9339ce84b79b832ffe8c36d4b8c60aae58a59940d1670750d466d04b86a46e8404c8dac89946b27eb40677aefbd4e48ce219062b838626f398d4e63ebd59ae60923face4f5418789f3a9c42c4c017ceed77fc9c86a4194409f684f20a9b2f64d7de7fa374d47450771fc9dcc05cf2c2bb34fb4f245566165af2611daf207f39084f41b9c2501e087f0ff9840978904d26f79e0df77b52ff8dc51034194741def8c0cc3ea638349fc447e248aba6994e1201413cc4d4fccfab0082f8393eb24aa7a6f1ec5ae4cffde1410354b0a930d888cc4d75c94f58d2c4862fcbbde7637444d09f0e3fd4ce3fb0934982abbfd14ae8d6b31a5a736179aee972c6fc968fddfe29881434bb7d4c3d6f31ed611ad33caa0373de6051adbc639ad1ed6fad06a0bb65871e4cb3abe6c060500dc8fb83fea00176f35d0ed68acdf73b5eaf32b4322f8b4e8f671733f94b870e99b283014435a0aa223bd6bd3a192ca2fe11a207906358dc49d49c2b0c826a165d2ef3196e9d5b86a6515aaf38e57c7c5bbf7ab7f7974d4c012aac2982e2b9725db8fa2f6dddccfe119f78855e136cf58d69d623732e1cc7bd910caa6b53951fab4d1c69acc3a6fa1289f22c8e4de3f67e78fe63e015de345a5bdb5a5becb415c06cfd0744fedd04c91abacd4cd0dbe7c2323220189482c2fc5ac9a683b48907bf33d571540986506f04a2f74019f41fed754fac3f616de59ea5c1ab9e4cfb72efac5af29fffd502b21ea1e1ea41a3a22abe0589b5c737bb851c6eb8d89bb99556eb3966e2d658f68f7940d99740f05437edd54a3824be48b3b919c00688ff88df070434a1c69b9848ab94aea47082dc554f1092ca77d298e59a8419ad22dc8b4e8a725cfd1abcece95045012842ff6eced765daa9bb1b08103abc829a895cf75c090db3761927aff4398d0b5300311d6e3343d02881d88b3d65b7f11488afafba4d719510fb2ab94e61ba40a461e8972a467c71418b335a7ef70e5293ae07b0c6cb6bb12f15111d68afb1f1b54e4dc1c4e0dc360f844086d72928b33c4cca5fe13ad28f57103290ca77adb92458d4bd10f675b47a14d5b4f6a73932cb97fc4ccb841e8dbe40b29aaa73a291569ecfe3bc1e5e95aa46e1a16da6ee9fd32b550852d3fede027214bd74c465317d6ebb75533e4eadabb37557265447809a3a9a830fe7cf103dd95", 0x5db) read(r1, &(0x7f00000003c0)=""/235, 0xeb) 2018/04/05 19:45:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="a2", 0x1) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x3a, &(0x7f0000000300)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, &(0x7f0000000100)=""/84, 0x54}}], 0x1, 0x0, &(0x7f00000058c0)={0x0, 0x1c9c380}) 2018/04/05 19:45:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000001480), 0x0, &(0x7f0000000180)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x200}}], 0x30}, 0x0) 2018/04/05 19:45:23 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x2000000000010d, 0x2, &(0x7f0000000000)=""/4, &(0x7f00009d6ffc)=0x4) 2018/04/05 19:45:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) 2018/04/05 19:45:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) 2018/04/05 19:45:23 executing program 6: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, r0, 0x5) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x202) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x1, 0x8, 0xffffffff, 0x0, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="e6"]) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000580)={r1, r1, 0x7}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5bd3, 0x42) r2 = shmget(0x0, 0x2000, 0x2, &(0x7f000016b000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r4 = getegid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x8001, r3, r4, r5, r6, 0x170, 0x3c}, 0x20000000000, 0x6, 0x4, 0x0, r0, r0}) prctl$intptr(0x1f, 0x0) 2018/04/05 19:45:23 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x100, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000fb3ffc), 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000040)="0f8b000000800f2840ca66b8ca008ed866b838010f00d80fc75b002e0f2261c4c17d11060fc728c4c17d119d02000000c4c28104500c", 0x36}], 0x1, 0x0, &(0x7f0000000340), 0x0) 2018/04/05 19:45:23 executing program 4: r0 = socket(0x200000000000002, 0x80003, 0x1) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000), 0x0) 2018/04/05 19:45:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) 2018/04/05 19:45:23 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000964ff8)=[{0x6}]}, 0x10) 2018/04/05 19:45:23 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="7312c1a72ce67ebfde5fd3ec91c45248a53f60b5a4c01632f1f64674acd8054b0f78b654a51136f624a6b44eaf0931fdb7c45c3fbd1f9e1cb5850c4957a90130ffdc6e4fb7bbd3934d2fd853c583451ce424ba9daf8070593fff310c3154609c531dc0e8d6d3b4a3fac9857a656ba4383bd2519db51a7d1b809a6769d80a863fc3e7545ef96937cad1410e958bbd584592fe994376", 0x95}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f00000003c0)=""/14, 0xe}], 0x2, &(0x7f0000000080)=""/107, 0x6b}, 0x0) 2018/04/05 19:45:23 executing program 3: syz_open_dev$random(&(0x7f00000003c0)='/dev/random\x00', 0x0, 0x800) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001500)={0x1, 0x2, 0x9, 0x8, 0x0, 0x3, 0x101}, 0xc) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='coredump_filter\x00') getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000280)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000200)={'eql\x00', 0x7e9}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x2, [], 0x1}}, &(0x7f0000000040)=0x20) r3 = syz_open_procfs(r1, &(0x7f0000000100)='coredump_filter\x00') getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001600)={'filter\x00'}, &(0x7f0000000380)=0x5) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000015c0)={0x6, 0x3f2}) pwrite64(r2, &(0x7f0000000540)="16b8c12458b621ff5acf9b23e36089173633effe3f815198e47d882bc1f3a0d3c38ae4b9bb78b1e7f9d07b2a84b08d735a992450c2ce39860ccea1df580891f13789c12785e5ad4dbb96c6b4ced8f0d7beea28ee23f42f296dc8afda456ef08b94b1e870fc2ce6fe7f5b0bdefd6496081f84f5480f33547cec86882ac3e8174d2d5a67", 0x83, 0x0) fcntl$getown(r3, 0x9) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x7, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x0, 0x8, 0x6}) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000001580)=0xfffffffffffffff8, 0x4) sendfile(r3, r3, &(0x7f0000000440), 0x0) ioctl$VT_RELDISP(r3, 0x5605) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000240)=0x6a05) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000400)={@multicast1=0xe0000001, @rand_addr, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001540)=[@in6={0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}}], 0x1c) 2018/04/05 19:45:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00007daff4)={0x0, 0x0, 0x80000000021}, 0xc) 2018/04/05 19:45:23 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000d68f5d)='`') 2018/04/05 19:45:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)='stack\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x45}], 0x10000000000000d8) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r1, r2, 0x0) 2018/04/05 19:45:23 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x8001, 0x0, r1}) 2018/04/05 19:45:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/05 19:45:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000004c0)=0x1200000000010000, 0x11e) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) write$eventfd(r1, &(0x7f0000000040), 0xf86e) [ 59.577432] mmap: syz-executor6 (6407) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/04/05 19:45:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000e971000040"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/05 19:45:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000c03000)=[@in={0x2}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) 2018/04/05 19:45:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff00000000001b00000200010000000000000002020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 2018/04/05 19:45:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff}}) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 2018/04/05 19:45:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000362fa0)=[{&(0x7f0000000000)=""/195, 0xc3}], 0x1, 0x100) 2018/04/05 19:45:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000004c0)=0x1200000000010000, 0x11e) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) write$eventfd(r1, &(0x7f0000000040), 0xf86e) 2018/04/05 19:45:24 executing program 6: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, r0, 0x5) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x202) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x1, 0x8, 0xffffffff, 0x0, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="e6"]) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000580)={r1, r1, 0x7}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5bd3, 0x42) r2 = shmget(0x0, 0x2000, 0x2, &(0x7f000016b000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r4 = getegid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x8001, r3, r4, r5, r6, 0x170, 0x3c}, 0x20000000000, 0x6, 0x4, 0x0, r0, r0}) prctl$intptr(0x1f, 0x0) 2018/04/05 19:45:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/05 19:45:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)=""/250) 2018/04/05 19:45:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff}}) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 2018/04/05 19:45:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:45:25 executing program 5: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f000000c000)={0x200}) r0 = syz_open_dev$evdev(&(0x7f00000e4fee)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000c000)) 2018/04/05 19:45:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000000)={0xe2, &(0x7f0000000100)=""/226}) writev(r0, &(0x7f0000000000), 0x1000000000000075) 2018/04/05 19:45:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff}}) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 2018/04/05 19:45:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000004c0)=0x1200000000010000, 0x11e) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) write$eventfd(r1, &(0x7f0000000040), 0xf86e) 2018/04/05 19:45:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff}}) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 2018/04/05 19:45:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/05 19:45:26 executing program 5: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00008caff0)=[{&(0x7f0000000000)="480000001400190009004bea450d8c560a84660080ffe00600100000000000a2bc5603ca00004000000000000000000001000d0000000b09ff0005ff00c7e5ed0700000000000000", 0x48}], 0x1) 2018/04/05 19:45:26 executing program 3: r0 = creat(&(0x7f0000001340)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000d9ffec)="0000000201000000000000010400000000000000", 0x14, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f00000025c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{}, 0x0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"05021cf8dae523e9ea655bf2"}}}}], 0x30) 2018/04/05 19:45:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="c4e17d7f2f66b8e5000f00d8c4619f10e92e0f32410f01df26410f08260f01d564460f4745002e66470f388131d9f2", 0x2f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/05 19:45:26 executing program 1: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000004bc0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005080), 0x0, &(0x7f0000005100)=""/151, 0x97}}], 0x1, 0x163, &(0x7f0000005400)={0x77359400}) 2018/04/05 19:45:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x20, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/05 19:45:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000004c0)=0x1200000000010000, 0x11e) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) write$eventfd(r1, &(0x7f0000000040), 0xf86e) 2018/04/05 19:45:26 executing program 6: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, r0, 0x5) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x202) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x1, 0x8, 0xffffffff, 0x0, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="e6"]) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000580)={r1, r1, 0x7}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5bd3, 0x42) r2 = shmget(0x0, 0x2000, 0x2, &(0x7f000016b000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r4 = getegid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x8001, r3, r4, r5, r6, 0x170, 0x3c}, 0x20000000000, 0x6, 0x4, 0x0, r0, r0}) prctl$intptr(0x1f, 0x0) [ 61.248385] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 2018/04/05 19:45:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) readv(r0, &(0x7f0000001240)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) 2018/04/05 19:45:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/05 19:45:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10}, 0x1e0, &(0x7f00000002c0)={&(0x7f0000000280)=@delneigh={0x24, 0x1d, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, [@NDA_DST_IPV4={0x8, 0x1, @remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x24}, 0x1}, 0x0) 2018/04/05 19:45:26 executing program 3: syz_fuseblk_mount(&(0x7f0000000040)="e91f7189591e9233614b2f", &(0x7f0000000080)="e91f7189591e9233614b2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/05 19:45:26 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00001f4ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000aaf000)='./file0\x00', 0x0) mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) madvise(&(0x7f0000b72000/0x1000)=nil, 0x1000, 0x10200000008) 2018/04/05 19:45:26 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000001240)='net\x00\x00\x00\x00p\x00') exit(0x0) fstat(r1, &(0x7f0000001140)) 2018/04/05 19:45:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2}, 'ip6_vti0\x00'}) 2018/04/05 19:45:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) [ 61.536821] binder: 6549:6550 ERROR: BC_REGISTER_LOOPER called without request [ 61.576254] binder: 6550 RLIMIT_NICE not set [ 61.580909] binder: 6550 RLIMIT_NICE not set [ 61.593480] binder: BINDER_SET_CONTEXT_MGR already set [ 61.599635] binder: 6549:6550 ioctl 40046207 0 returned -16 [ 61.606903] binder: 6549:6554 ERROR: BC_REGISTER_LOOPER called without request [ 61.608972] binder_alloc: 6549: binder_alloc_buf, no vma [ 61.620150] binder: 6549:6556 transaction failed 29189/-3, size 0-0 line 2963 [ 61.641527] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.647847] binder: release 6549:6550 transaction 7 out, still active [ 61.654782] binder: undelivered TRANSACTION_COMPLETE [ 61.659963] binder: release 6549:6550 transaction 7 in, still active [ 61.666525] binder: send failed reply for transaction 7, target dead 2018/04/05 19:45:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/05 19:45:26 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480042, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x3}) fallocate(r0, 0x3, 0x0, 0x0) 2018/04/05 19:45:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2}, 'ip6_vti0\x00'}) 2018/04/05 19:45:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) 2018/04/05 19:45:26 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x12, &(0x7f0000982f5b)={@random="0352ba8e8227", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x4000000000000320, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @dev={0xac, 0x14}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2099e9", 0x0, "d085f5"}}}}}}, &(0x7f000004d000)) 2018/04/05 19:45:27 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480042, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x3}) fallocate(r0, 0x3, 0x0, 0x0) [ 62.174802] binder: 6566:6567 ERROR: BC_REGISTER_LOOPER called without request 2018/04/05 19:45:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2}, 'ip6_vti0\x00'}) [ 62.230430] binder: 6567 RLIMIT_NICE not set [ 62.240637] binder: 6567 RLIMIT_NICE not set [ 62.340556] binder: release 6566:6567 transaction 10 in, still active [ 62.347439] binder: send failed reply for transaction 10 to 6566:6567 [ 62.374530] binder: undelivered TRANSACTION_COMPLETE [ 62.379790] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:45:27 executing program 6: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, r0, 0x5) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x202) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x1, 0x8, 0xffffffff, 0x0, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="e6"]) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000580)={r1, r1, 0x7}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5bd3, 0x42) r2 = shmget(0x0, 0x2000, 0x2, &(0x7f000016b000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r4 = getegid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x8001, r3, r4, r5, r6, 0x170, 0x3c}, 0x20000000000, 0x6, 0x4, 0x0, r0, r0}) prctl$intptr(0x1f, 0x0) 2018/04/05 19:45:27 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040)="be38", 0x2, 0xc1, &(0x7f0000000100)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/97, 0x61}], 0x1, &(0x7f0000001ec0)=""/148, 0x94}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00002e1fe0)=[{&(0x7f0000c62f65)="db", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000140)='e', 0x1, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/05 19:45:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000200)) 2018/04/05 19:45:27 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480042, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x3}) fallocate(r0, 0x3, 0x0, 0x0) 2018/04/05 19:45:27 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) 2018/04/05 19:45:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2}, 'ip6_vti0\x00'}) 2018/04/05 19:45:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="bfb9571b02c2a8f6"]]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:45:27 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="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", 0x118) 2018/04/05 19:45:28 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480042, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x3}) fallocate(r0, 0x3, 0x0, 0x0) [ 63.173979] binder: 6605:6610 ERROR: BC_REGISTER_LOOPER called without request [ 63.219331] binder: 6610 RLIMIT_NICE not set 2018/04/05 19:45:28 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/208, 0xd0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/27, 0x1b}, 0x0) 2018/04/05 19:45:28 executing program 7: memfd_create(&(0x7f0000000540)='\x00', 0x0) write$fuse(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="cb00000000000000000000000000000024b367c23a17ebbc19e2074811c2cd37d919c103f3d51944b1f4e92c8e48feba74560dcfacd075d26d610fefdf5f89dd552c42297c4cab4dc7961a9c28dc6cc14f4a7f32f32f5f6858d485448f1975c85c8b5dc54e593c0d1535a0e36c91ccaeb065f2ce40321c88a0c9c631778c94d120470abf1843965e4939fee8b352242b"], 0x90) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/enforce\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="7d303116770fa44a7b7cee57b51d100081bfedf704010000009b7b695836055eaa"]) close(r1) 2018/04/05 19:45:28 executing program 1: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x80fffffc) [ 63.245538] binder: 6610 RLIMIT_NICE not set 2018/04/05 19:45:28 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) setsockopt$inet6_buf(r0, 0x29, 0x100000000000003b, &(0x7f00003d5f88)="c500000000000030020000000000008b75bed544017d5cdbb3ffe92774a718cdb92e840900edc044258289d1363587f8f27df0300351c41fa609288d3f00e4ff7fae66075d5b65e19affeb0004e0f7997c08aab82d2fbee79bbd8807f812ab9ede37c41667928927268933648f2a6fe058e69a00d31f6f11", 0x78) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000607000)=@hopopts={0x0, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x20) sendto$inet6(r0, &(0x7f0000d2aa85)="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", 0x561, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/05 19:45:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @random="3b5f09814edc"}, 0xffffffffffffffff, {0x2}, "00ffffffffffffff00"}) socket$inet_icmp(0x2, 0x2, 0x1) 2018/04/05 19:45:28 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) [ 63.329608] futex_wake_op: syz-executor1 tries to shift op by -1; fix this program [ 63.356065] binder: release 6605:6610 transaction 12 in, still active [ 63.362806] binder: send failed reply for transaction 12 to 6605:6610 2018/04/05 19:45:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsetxattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)='GPL\x00', 0x4, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x48000042, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0xfff, &(0x7f0000000080)=0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = epoll_create1(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000b1afa0), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000000f01000055000000"], 0x10}, 0x0) ioctl(r2, 0xc0184900, &(0x7f0000002000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000d83000)) r4 = dup2(r3, r1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000180)={0x8, 0x6000}) [ 63.405214] futex_wake_op: syz-executor1 tries to shift op by -1; fix this program [ 63.417206] binder: 6641:6642 ERROR: BC_REGISTER_LOOPER called without request [ 63.442616] binder: undelivered TRANSACTION_COMPLETE [ 63.447843] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.475158] binder: 6642 RLIMIT_NICE not set [ 63.494835] binder: 6642 RLIMIT_NICE not set [ 63.542390] binder: release 6641:6642 transaction 14 in, still active [ 63.549192] binder: send failed reply for transaction 14 to 6641:6642 [ 63.556908] binder: undelivered TRANSACTION_COMPLETE [ 63.562111] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:45:29 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000977000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/05 19:45:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004aeff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x8) 2018/04/05 19:45:29 executing program 2: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x6, 0x0, &(0x7f0000003fb3), &(0x7f0000000000)) 2018/04/05 19:45:29 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009f1000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00001e4000)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) 2018/04/05 19:45:29 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/netfilter\x00') fchdir(r1) exit(0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 2018/04/05 19:45:29 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001c000306000000000d0000000200000001000000000003c91300010000000000000900000000000000050b", 0x2f}], 0x1}, 0x0) 2018/04/05 19:45:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmsg$alg(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="01455f88d92ac3331650fc0224e00cc993d2945c6fd7e0af5301e5d274bd91fba5b33b1c09421e3d1ad95ab8366b83285e60514488ba3a088d0ab14c5bc6eac9024ea3d7b5de8b0f95ef5f42b00e9621", 0x50}], 0x1, &(0x7f0000002280)}, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/05 19:45:29 executing program 6: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/04/05 19:45:29 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000df7000)='./file0/file0\x00', &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v3') 2018/04/05 19:45:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) write(r1, &(0x7f00000013c0)="8c", 0x1) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x200, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100), 0x0, 0x8}], 0x1, &(0x7f00000001c0)=ANY=[]) tee(r0, r3, 0x8, 0x0) 2018/04/05 19:45:29 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001c000306000000000d0000000200000001000000000003c91300010000000000000900000000000000050b", 0x2f}], 0x1}, 0x0) 2018/04/05 19:45:30 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x400000000004, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000219ff0)={0x77359400}, &(0x7f0000048000), 0x0) exit(0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x57}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/05 19:45:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)) 2018/04/05 19:45:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075bff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4008700c) 2018/04/05 19:45:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001c000306000000000d0000000200000001000000000003c91300010000000000000900000000000000050b", 0x2f}], 0x1}, 0x0) 2018/04/05 19:45:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x8}, 0xc) unshare(0x400) pselect6(0x40, &(0x7f0000000080)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/05 19:45:30 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000ad9000), 0xec, 0x0) 2018/04/05 19:45:30 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup2(r1, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@empty, @loopback, 0x0}, &(0x7f0000000600)=0xc) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) timerfd_create(0x6, 0x0) io_setup(0x21, &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @dev}, @in6=@mcast1}}, {{}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_default\x00', &(0x7f0000000780)=""/255, 0xff) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080)={0x1d}, 0x10) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x8, 0xffffffffffffffff, 0x0, 0x4182ff01, 0x2409dea1, 0xcef, 0x7, 0x632, 0x0, 0x5e5, 0x1, 0x8001, 0x1, 0x39b3, 0x81, 0x9], 0x3000, 0x200}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'e\x00\x00\x00\x00\x00\x00\x00\t\x00', {0x2, 0x4e23, @rand_addr=0xfff}}) 2018/04/05 19:45:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in=@multicast1=0xe0000001, @in=@multicast1=0xe0000001, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80}}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 2018/04/05 19:45:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x1, 0x2}) 2018/04/05 19:45:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)) 2018/04/05 19:45:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000540), 0x4) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x5}, 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 2018/04/05 19:45:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001c000306000000000d0000000200000001000000000003c91300010000000000000900000000000000050b", 0x2f}], 0x1}, 0x0) 2018/04/05 19:45:30 executing program 7: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB="20f1ffffffffffff2b"], 0x1}, 0x1}, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=[{&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000001280)=""/164, 0xa4}, {&(0x7f0000001140)=""/187, 0xbb}, {&(0x7f0000001400)=""/83, 0x33}, {&(0x7f0000001480)=""/8, 0x8}, {&(0x7f00000014c0)=""/177, 0xb1}, {&(0x7f0000001580)=""/161, 0x3de}, {&(0x7f0000001640)=""/3, 0x3}, {&(0x7f0000001200)=""/114, 0x72}], 0x223, 0x0) 2018/04/05 19:45:30 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) 2018/04/05 19:45:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000006940)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000006900)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000006980)=@set_option={0xe, 0x0, 0xfa00, @id_afonly={&(0x7f0000006740), r1, 0x0, 0x2}}, 0x9d) 2018/04/05 19:45:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48b}]}) [ 66.298062] sd 0:0:1:0: [sg0] tag#4546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 66.306870] sd 0:0:1:0: [sg0] tag#4546 CDB: Test Unit Ready [ 66.312645] sd 0:0:1:0: [sg0] tag#4546 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.321552] sd 0:0:1:0: [sg0] tag#4546 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.330453] sd 0:0:1:0: [sg0] tag#4546 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.339319] sd 0:0:1:0: [sg0] tag#4546 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.348212] sd 0:0:1:0: [sg0] tag#4546 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.357092] sd 0:0:1:0: [sg0] tag#4546 CDB[50]: 00 00 00 00 00 00 00 [ 66.463662] sd 0:0:1:0: [sg0] tag#4512 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 66.472411] sd 0:0:1:0: [sg0] tag#4512 CDB: Test Unit Ready [ 66.478175] sd 0:0:1:0: [sg0] tag#4512 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.487063] sd 0:0:1:0: [sg0] tag#4512 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.495964] sd 0:0:1:0: [sg0] tag#4512 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.504852] sd 0:0:1:0: [sg0] tag#4512 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.513750] sd 0:0:1:0: [sg0] tag#4512 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.522618] sd 0:0:1:0: [sg0] tag#4512 CDB[50]: 00 00 00 00 00 00 00 2018/04/05 19:45:31 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000ad9000), 0xec, 0x0) 2018/04/05 19:45:31 executing program 0: r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f000001dff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="001567e3ea55949175f302d947ea66cd9aea8cb1ce58a91c95dae562fae97ce398d6f2b9e8f8ba07ce0ffa0d1619f3d4d3ee8713e12cb70d631bee342f44c9ae13fcf9fe989c54cc3cf3a4864673703dcb1eedd2bb8544bdaa4259aaaa6ce87c"], 0x1}, 0x1}, 0x0) lseek(r0, 0x0, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x9, 0x800, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000080)=0xc4) 2018/04/05 19:45:31 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000571fe5)=""/27, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) 2018/04/05 19:45:31 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:45:31 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000080)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001700), 0x0, 0x0, &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f00002e6f80), 0x0, &(0x7f0000878000)}, 0x0) 2018/04/05 19:45:31 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1c1371}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@alu={0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) 2018/04/05 19:45:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)) 2018/04/05 19:45:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) dup2(r1, r0) 2018/04/05 19:45:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)) 2018/04/05 19:45:32 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@uid={'uid', 0x3d}, 0x2c}]}) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='tmpfs\x00', 0x0, &(0x7f0000001740)) 2018/04/05 19:45:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000002ffc)=""/4, &(0x7f0000000000)=0x4) 2018/04/05 19:45:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/05 19:45:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x2]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/05 19:45:32 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000b56ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x3) r1 = accept(r0, 0x0, &(0x7f000069f000)) listen(r1, 0x0) 2018/04/05 19:45:32 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000ad9000), 0xec, 0x0) 2018/04/05 19:45:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000), 0x0) 2018/04/05 19:45:32 executing program 5: unlink(&(0x7f0000000140)='./file0\x00') r0 = accept4(0xffffffffffffffff, &(0x7f0000000600)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f0000000680)=0x80, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000700)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000740)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) r2 = perf_event_open(&(0x7f0000723f88)={0x8000002, 0x70, 0xc35, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000cc0)) stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)) sendmsg$nl_netfilter(r0, &(0x7f0000002400)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000dc0)={0x150, 0xa, 0xa, 0x9, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0xa}, [@generic="96d6a05115480f226b8ff45d0c74acb2d09b79c49fbbb0a3b6b3f00ec74dcabf07f588e0990eabc37fec978ae85f6da561ae7b69ffdf57933f4cebce9ce31d11c99ba44b6c7c2743fb1b3807db2024ce33763b56ecb13b3b46d348949d9bdf74d6d5cbdbbdc0d0f217f9789f88294c79aa31f72c08", @generic="1eb06ad273d9e4571f2279fc09015a6ceff40b6019c97d57225ac4bb51b7517fd06568e2e42d758b46bc7fa9d2ebd06d8bf32f", @typed={0x14, 0xc, @ipv6=@loopback={0x0, 0x1}}, @generic="b15da744d1ce12c92c87c0bc82c17e573ffdf5b27953e94549fabaea4d0cc57521e43c8fa5fdc2ad03c3d8f5697aeb6cee1101c8e96704bbbf8bf5ab8889b623c368520a903ecf1af30ebda5310be59ff4d301a70e6627c3541c31c3997cf07c804e74025a28ff02df32122a07f183310a906a9c61fa0edff85b98e28d671ea9"]}, 0x150}, 0x1}, 0x404c040) r3 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r5, r4, 0x8, 0x0) fcntl$setown(r2, 0x8, r3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x7, 0x0, 0xc971) connect$llc(r9, &(0x7f0000000440)={0x1a, 0x8, 0x7ff, 0x8001, 0xb8, 0x80000001, @random="eac6ef1d9c00"}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000400000050040000380100003801000000000000680300000603000068030000040000000000000000000000000000"], 0x1) r10 = semget$private(0x0, 0x3, 0x1) r11 = memfd_create(&(0x7f0000000280)='/dev/kvm\x00', 0x3) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f00000002c0)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x26b3b411}}) semctl$GETALL(r10, 0x0, 0xd, &(0x7f0000000080)=""/171) r12 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x600000) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) sendto$unix(r11, &(0x7f0000000480)="cf9cac78bb0c7bb2ddfc407d14868d28c0036a8cc84fe5d8943c4005efccbdf0c8d5963552565c4a080bbc57185a69b082aece692d211073a35ca5dfa46968b94c30deb107428c3661de6e6c40eb142eb0851ea9ec68676cdc4932b2ff5d913d78ba422884822d77c3bb3611b361747f9c2baa5655fc1ac3be10301f1dc3c24894ea663800569146b40af7c95de405d7e8db480f5d350dd36d59440968f6eb43e0a8daddb231eae17aae23e738adc68aa504c190b5eb475832a8eda9203525bec2b2289713b931c439418e86", 0xcc, 0x40010, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x4}) 2018/04/05 19:45:32 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x16, "fcb9e5534725535e1a8ee44ee9e22d364b289e7960eb"}, &(0x7f0000001080)=0x1e) ioctl(r0, 0x2285, &(0x7f0000000040)='S') 2018/04/05 19:45:32 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/05 19:45:32 executing program 2: setrlimit(0xb, &(0x7f00008e0ff0)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1ffff, 0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/l2cap\x00') ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) timer_create(0x0, &(0x7f0000c81e03)={0x0, 0x0, 0x0, @thr={&(0x7f0000244f9a), &(0x7f0000658ffa)}}, &(0x7f00008a2000)) 2018/04/05 19:45:32 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x0, 0xe0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000300)={0x0}, 0x800) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000bc0)}]) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') 2018/04/05 19:45:32 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB]) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/05 19:45:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0xc2) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000353000), 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) shutdown(r0, 0x1) 2018/04/05 19:45:32 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000ad9000), 0xec, 0x0) 2018/04/05 19:45:32 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xef) read(r0, &(0x7f0000004f45)=""/187, 0xbb) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000013ffc)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/05 19:45:33 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000b4efab)="5500000018007fafb7a41cb22da280000206000000a843096c37236939000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de4411006827c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/05 19:45:33 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 2018/04/05 19:45:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000680)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/05 19:45:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = fcntl$getown(r1, 0x9) r3 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000005c0)={&(0x7f0000000080)="449ed0dd6831a7fb44eca4221b1fb01abfec082aa7d0ee6f0ba9db0ece7da2bd3fb0", 0x22}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r6, &(0x7f0000ec6000)=""/50, 0x32) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x1}}) ioperm(0x20, 0x3, 0x0) setrlimit(0x0, &(0x7f00000008c0)={0x101, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000480)) r8 = dup2(r4, 0xffffffffffffffff) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, {0xd, 0x8000, 0x8, 0x0, 0x5, 0x6}, 0x0, 0x5}, 0xe) preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x8, 0x16) 2018/04/05 19:45:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffff9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="73797a5f74756e0000000000001700", 0x10) connect(r1, &(0x7f0000000040)=@ethernet={0x0, @random="148547ee9664"}, 0x80) 2018/04/05 19:45:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000009fc3)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000cdfffc)="3b692cec", 0x4) 2018/04/05 19:45:33 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x2201, 0xfffffffffffff000) 2018/04/05 19:45:33 executing program 5: unlink(&(0x7f0000000140)='./file0\x00') r0 = accept4(0xffffffffffffffff, &(0x7f0000000600)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f0000000680)=0x80, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000700)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000740)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) r2 = perf_event_open(&(0x7f0000723f88)={0x8000002, 0x70, 0xc35, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000cc0)) stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)) sendmsg$nl_netfilter(r0, &(0x7f0000002400)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000dc0)={0x150, 0xa, 0xa, 0x9, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0xa}, [@generic="96d6a05115480f226b8ff45d0c74acb2d09b79c49fbbb0a3b6b3f00ec74dcabf07f588e0990eabc37fec978ae85f6da561ae7b69ffdf57933f4cebce9ce31d11c99ba44b6c7c2743fb1b3807db2024ce33763b56ecb13b3b46d348949d9bdf74d6d5cbdbbdc0d0f217f9789f88294c79aa31f72c08", @generic="1eb06ad273d9e4571f2279fc09015a6ceff40b6019c97d57225ac4bb51b7517fd06568e2e42d758b46bc7fa9d2ebd06d8bf32f", @typed={0x14, 0xc, @ipv6=@loopback={0x0, 0x1}}, @generic="b15da744d1ce12c92c87c0bc82c17e573ffdf5b27953e94549fabaea4d0cc57521e43c8fa5fdc2ad03c3d8f5697aeb6cee1101c8e96704bbbf8bf5ab8889b623c368520a903ecf1af30ebda5310be59ff4d301a70e6627c3541c31c3997cf07c804e74025a28ff02df32122a07f183310a906a9c61fa0edff85b98e28d671ea9"]}, 0x150}, 0x1}, 0x404c040) r3 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r5, r4, 0x8, 0x0) fcntl$setown(r2, 0x8, r3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x7, 0x0, 0xc971) connect$llc(r9, &(0x7f0000000440)={0x1a, 0x8, 0x7ff, 0x8001, 0xb8, 0x80000001, @random="eac6ef1d9c00"}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000400000050040000380100003801000000000000680300000603000068030000040000000000000000000000000000"], 0x1) r10 = semget$private(0x0, 0x3, 0x1) r11 = memfd_create(&(0x7f0000000280)='/dev/kvm\x00', 0x3) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f00000002c0)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x26b3b411}}) semctl$GETALL(r10, 0x0, 0xd, &(0x7f0000000080)=""/171) r12 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x600000) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) sendto$unix(r11, &(0x7f0000000480)="cf9cac78bb0c7bb2ddfc407d14868d28c0036a8cc84fe5d8943c4005efccbdf0c8d5963552565c4a080bbc57185a69b082aece692d211073a35ca5dfa46968b94c30deb107428c3661de6e6c40eb142eb0851ea9ec68676cdc4932b2ff5d913d78ba422884822d77c3bb3611b361747f9c2baa5655fc1ac3be10301f1dc3c24894ea663800569146b40af7c95de405d7e8db480f5d350dd36d59440968f6eb43e0a8daddb231eae17aae23e738adc68aa504c190b5eb475832a8eda9203525bec2b2289713b931c439418e86", 0xcc, 0x40010, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x4}) 2018/04/05 19:45:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/04/05 19:45:33 executing program 6: mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000040)='.', 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') umount2(&(0x7f0000000580)='.', 0x4) 2018/04/05 19:45:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x3e, 0x4) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)}, 0x2023) 2018/04/05 19:45:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffff9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="73797a5f74756e0000000000001700", 0x10) connect(r1, &(0x7f0000000040)=@ethernet={0x0, @random="148547ee9664"}, 0x80) 2018/04/05 19:45:33 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000100)='./file0\x00') close(r0) 2018/04/05 19:45:33 executing program 0: r0 = memfd_create(&(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x0) fstatfs(r0, &(0x7f0000000100)=""/176) 2018/04/05 19:45:33 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000), 0x0) 2018/04/05 19:45:33 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000003ff8)=0x80) r1 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r1, 0x0) write$selinux_user(r0, &(0x7f0000000000)={'system_u:object_r:inetd_exec_t:s0', 0x20, "73b90000fffe647500d8a3b0c5f65ad276ad7e23a669a728f70c85ba6334b32567692729107fcb313f14433f2ba7db4b84a09437fc36ec07a96c70e86ae27778adaf53da285284e7fa29dc2827a96d09350be959826a0e151d80dcde"}, 0xfffffd5f) 2018/04/05 19:45:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffff9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="73797a5f74756e0000000000001700", 0x10) connect(r1, &(0x7f0000000040)=@ethernet={0x0, @random="148547ee9664"}, 0x80) 2018/04/05 19:45:33 executing program 0: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x44) 2018/04/05 19:45:33 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00000000401111f0e0a0b00000004bf00000009ec0800030005000000", 0x24) 2018/04/05 19:45:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = fcntl$getown(r1, 0x9) r3 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000005c0)={&(0x7f0000000080)="449ed0dd6831a7fb44eca4221b1fb01abfec082aa7d0ee6f0ba9db0ece7da2bd3fb0", 0x22}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r6, &(0x7f0000ec6000)=""/50, 0x32) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x1}}) ioperm(0x20, 0x3, 0x0) setrlimit(0x0, &(0x7f00000008c0)={0x101, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000480)) r8 = dup2(r4, 0xffffffffffffffff) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, {0xd, 0x8000, 0x8, 0x0, 0x5, 0x6}, 0x0, 0x5}, 0xe) preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x8, 0x16) 2018/04/05 19:45:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffff9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="73797a5f74756e0000000000001700", 0x10) connect(r1, &(0x7f0000000040)=@ethernet={0x0, @random="148547ee9664"}, 0x80) 2018/04/05 19:45:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000dafff0)=[{&(0x7f0000ac9000)="290000002000190700003fffffffda060202fb75ade80001040000040d00140000fdff000000000001", 0x29}], 0x1) 2018/04/05 19:45:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") flistxattr(r0, &(0x7f0000000000)=""/2, 0x2) 2018/04/05 19:45:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f0000000740)=""/103, 0x67}], 0x2, 0x0) 2018/04/05 19:45:34 executing program 7: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x483, &(0x7f0000000080)=""/188, &(0x7f0000000140)=0xbc) 2018/04/05 19:45:34 executing program 5: unlink(&(0x7f0000000140)='./file0\x00') r0 = accept4(0xffffffffffffffff, &(0x7f0000000600)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f0000000680)=0x80, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000700)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000740)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) r2 = perf_event_open(&(0x7f0000723f88)={0x8000002, 0x70, 0xc35, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000cc0)) stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)) sendmsg$nl_netfilter(r0, &(0x7f0000002400)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000dc0)={0x150, 0xa, 0xa, 0x9, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0xa}, [@generic="96d6a05115480f226b8ff45d0c74acb2d09b79c49fbbb0a3b6b3f00ec74dcabf07f588e0990eabc37fec978ae85f6da561ae7b69ffdf57933f4cebce9ce31d11c99ba44b6c7c2743fb1b3807db2024ce33763b56ecb13b3b46d348949d9bdf74d6d5cbdbbdc0d0f217f9789f88294c79aa31f72c08", @generic="1eb06ad273d9e4571f2279fc09015a6ceff40b6019c97d57225ac4bb51b7517fd06568e2e42d758b46bc7fa9d2ebd06d8bf32f", @typed={0x14, 0xc, @ipv6=@loopback={0x0, 0x1}}, @generic="b15da744d1ce12c92c87c0bc82c17e573ffdf5b27953e94549fabaea4d0cc57521e43c8fa5fdc2ad03c3d8f5697aeb6cee1101c8e96704bbbf8bf5ab8889b623c368520a903ecf1af30ebda5310be59ff4d301a70e6627c3541c31c3997cf07c804e74025a28ff02df32122a07f183310a906a9c61fa0edff85b98e28d671ea9"]}, 0x150}, 0x1}, 0x404c040) r3 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r5, r4, 0x8, 0x0) fcntl$setown(r2, 0x8, r3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x7, 0x0, 0xc971) connect$llc(r9, &(0x7f0000000440)={0x1a, 0x8, 0x7ff, 0x8001, 0xb8, 0x80000001, @random="eac6ef1d9c00"}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000400000050040000380100003801000000000000680300000603000068030000040000000000000000000000000000"], 0x1) r10 = semget$private(0x0, 0x3, 0x1) r11 = memfd_create(&(0x7f0000000280)='/dev/kvm\x00', 0x3) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f00000002c0)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x26b3b411}}) semctl$GETALL(r10, 0x0, 0xd, &(0x7f0000000080)=""/171) r12 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x600000) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) sendto$unix(r11, &(0x7f0000000480)="cf9cac78bb0c7bb2ddfc407d14868d28c0036a8cc84fe5d8943c4005efccbdf0c8d5963552565c4a080bbc57185a69b082aece692d211073a35ca5dfa46968b94c30deb107428c3661de6e6c40eb142eb0851ea9ec68676cdc4932b2ff5d913d78ba422884822d77c3bb3611b361747f9c2baa5655fc1ac3be10301f1dc3c24894ea663800569146b40af7c95de405d7e8db480f5d350dd36d59440968f6eb43e0a8daddb231eae17aae23e738adc68aa504c190b5eb475832a8eda9203525bec2b2289713b931c439418e86", 0xcc, 0x40010, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x4}) 2018/04/05 19:45:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f00000021c0), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0xff, 0xba52, 0x7, 0x0, 0x0, 0x7}}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000002200)=ANY=[@ANYBLOB="1c000000170afdff7f3503ffffffffffffff00000000080001005591b1eb3fbb45175c4673"], 0x25}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002980)={0xffffffffffffffff}) listen(0xffffffffffffffff, 0x400000000000020) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x7bb7}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000002240)={0x0, 0x9, 0x417, 0xfffffffffffffffa}, &(0x7f00000001c0)=0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="03000000"], 0x1}, 0x1, 0x0, 0x0, 0x20040801}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x31, 0x0, 0x0, 0x10000, 0x8000, 0x0, 0xffffffff, 0x0, 0x0}, &(0x7f0000000240)=0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xe, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x818d, 0x82e, 0x1000}, @map={0x18, 0x1, 0x1}, @map={0x18, 0x7, 0x1}, @alu={0x7, 0x4, 0x1, 0x0, 0x1}, @ldst={0x0, 0x2, 0x6, 0x7, 0xb, 0x8, 0x4}, @exit={0x95}], &(0x7f00000006c0)='GPL\x00', 0xfffffffffffffff9, 0x98, &(0x7f0000000700)=""/152, 0x41f00, 0x1}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000840)=r6, 0x4) writev(r4, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d76a81014aed182f30284470080ffe00600000000000000a2bc5603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f0000002180)={0x1, 0xb40}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000280)="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") ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000003c0)={'bpq0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'bond0\x00', 0xa00}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x107}, 0x7d) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000002280)=@assoc_value={r5, 0xb4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x31, 0x7, 0x0, 0x1, 0x30}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x188, &(0x7f00001a7f05)=""/251}, 0x48) r7 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) preadv(r7, &(0x7f0000002100)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/61, 0x3d}, {&(0x7f0000001040)=""/26, 0x1a}, {&(0x7f0000001080)=""/75, 0x4b}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x5, 0x0) socket$netlink(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f00000021c0)=@unspec, 0xc) 2018/04/05 19:45:34 executing program 0: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000280)="240000002a005f000000000000ed7601000010ff0100000000000200ffde2c058ea72cd9", 0x24) [ 69.692542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.770938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/05 19:45:35 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000140)="5500000018007fbdb72da9b7a4a280930a06000000a84308910000003900080090000c00000000001900a30700ffffffee0000dc1338d54400009b841362f75afb4bf02ee35382447f3ab8220000060c6c4fab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) 2018/04/05 19:45:35 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/05 19:45:35 executing program 5: unlink(&(0x7f0000000140)='./file0\x00') r0 = accept4(0xffffffffffffffff, &(0x7f0000000600)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f0000000680)=0x80, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000700)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000740)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) r2 = perf_event_open(&(0x7f0000723f88)={0x8000002, 0x70, 0xc35, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000cc0)) stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)) sendmsg$nl_netfilter(r0, &(0x7f0000002400)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000dc0)={0x150, 0xa, 0xa, 0x9, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0xa}, [@generic="96d6a05115480f226b8ff45d0c74acb2d09b79c49fbbb0a3b6b3f00ec74dcabf07f588e0990eabc37fec978ae85f6da561ae7b69ffdf57933f4cebce9ce31d11c99ba44b6c7c2743fb1b3807db2024ce33763b56ecb13b3b46d348949d9bdf74d6d5cbdbbdc0d0f217f9789f88294c79aa31f72c08", @generic="1eb06ad273d9e4571f2279fc09015a6ceff40b6019c97d57225ac4bb51b7517fd06568e2e42d758b46bc7fa9d2ebd06d8bf32f", @typed={0x14, 0xc, @ipv6=@loopback={0x0, 0x1}}, @generic="b15da744d1ce12c92c87c0bc82c17e573ffdf5b27953e94549fabaea4d0cc57521e43c8fa5fdc2ad03c3d8f5697aeb6cee1101c8e96704bbbf8bf5ab8889b623c368520a903ecf1af30ebda5310be59ff4d301a70e6627c3541c31c3997cf07c804e74025a28ff02df32122a07f183310a906a9c61fa0edff85b98e28d671ea9"]}, 0x150}, 0x1}, 0x404c040) r3 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r5, r4, 0x8, 0x0) fcntl$setown(r2, 0x8, r3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x7, 0x0, 0xc971) connect$llc(r9, &(0x7f0000000440)={0x1a, 0x8, 0x7ff, 0x8001, 0xb8, 0x80000001, @random="eac6ef1d9c00"}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000400000050040000380100003801000000000000680300000603000068030000040000000000000000000000000000"], 0x1) r10 = semget$private(0x0, 0x3, 0x1) r11 = memfd_create(&(0x7f0000000280)='/dev/kvm\x00', 0x3) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f00000002c0)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x26b3b411}}) semctl$GETALL(r10, 0x0, 0xd, &(0x7f0000000080)=""/171) r12 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x600000) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) sendto$unix(r11, &(0x7f0000000480)="cf9cac78bb0c7bb2ddfc407d14868d28c0036a8cc84fe5d8943c4005efccbdf0c8d5963552565c4a080bbc57185a69b082aece692d211073a35ca5dfa46968b94c30deb107428c3661de6e6c40eb142eb0851ea9ec68676cdc4932b2ff5d913d78ba422884822d77c3bb3611b361747f9c2baa5655fc1ac3be10301f1dc3c24894ea663800569146b40af7c95de405d7e8db480f5d350dd36d59440968f6eb43e0a8daddb231eae17aae23e738adc68aa504c190b5eb475832a8eda9203525bec2b2289713b931c439418e86", 0xcc, 0x40010, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x4}) 2018/04/05 19:45:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = fcntl$getown(r1, 0x9) r3 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000005c0)={&(0x7f0000000080)="449ed0dd6831a7fb44eca4221b1fb01abfec082aa7d0ee6f0ba9db0ece7da2bd3fb0", 0x22}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r6, &(0x7f0000ec6000)=""/50, 0x32) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x1}}) ioperm(0x20, 0x3, 0x0) setrlimit(0x0, &(0x7f00000008c0)={0x101, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000480)) r8 = dup2(r4, 0xffffffffffffffff) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, {0xd, 0x8000, 0x8, 0x0, 0x5, 0x6}, 0x0, 0x5}, 0xe) preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x8, 0x16) 2018/04/05 19:45:35 executing program 1: r0 = socket$inet(0x10, 0x2, 0x6) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f0000001ec0)=@rc, 0x80, &(0x7f0000002000)}}], 0x1, 0x0, &(0x7f0000002100)={0x0, 0x1c9c380}) sendmsg(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005000)="10000000150061dd18c84c16290c729b", 0x10}], 0x1, &(0x7f0000000040)}, 0x0) 2018/04/05 19:45:35 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff0100", 0x1302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000380)}]) 2018/04/05 19:45:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xffffffffffffffff}) 2018/04/05 19:45:35 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) sendmsg$alg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/05 19:45:36 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_readv(r1, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/04/05 19:45:36 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000000200000000000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000000000000000100", 0xcb, 0x10000}], 0x0, &(0x7f0000014300)) 2018/04/05 19:45:36 executing program 7: futex(&(0x7f0000fd4000), 0xc, 0x0, &(0x7f000000d000), &(0x7f0000fd4000), 0x0) 2018/04/05 19:45:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xffffffffffffffff}) 2018/04/05 19:45:36 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0x6, 0x0, 0x0, 0x0, "0b01bd005fa217d9a44cd314bba7bdb1866e1fa23dc4255e9cd840e76b561f60e99bd22acf777c0c4549a35f"}, 0x0, [], {0x0, 0x989680}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x8801}) 2018/04/05 19:45:36 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x80000001, 0x0, r1, &(0x7f0000000100)="4587c710d53bd326db8bb6a2926e", 0xe}]) 2018/04/05 19:45:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r2 = fcntl$getown(r1, 0x9) r3 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000005c0)={&(0x7f0000000080)="449ed0dd6831a7fb44eca4221b1fb01abfec082aa7d0ee6f0ba9db0ece7da2bd3fb0", 0x22}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r6, &(0x7f0000ec6000)=""/50, 0x32) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x1}}) ioperm(0x20, 0x3, 0x0) setrlimit(0x0, &(0x7f00000008c0)={0x101, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000480)) r8 = dup2(r4, 0xffffffffffffffff) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, {0xd, 0x8000, 0x8, 0x0, 0x5, 0x6}, 0x0, 0x5}, 0xe) preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x8, 0x16) 2018/04/05 19:45:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x80086601, &(0x7f00000011c0)) [ 71.559178] QAT: Invalid ioctl [ 71.579224] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 1 transid 5 /dev/loop4 2018/04/05 19:45:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000001cff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @rand_addr=0x31a00dfb}, 0x10, &(0x7f0000001fc0), 0x0, &(0x7f0000000080)=[@rdma_dest={0x18, 0x114, 0x2}], 0x18}, 0x0) 2018/04/05 19:45:36 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x4}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) 2018/04/05 19:45:36 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0x6, 0x0, 0x0, 0x0, "0b01bd005fa217d9a44cd314bba7bdb1866e1fa23dc4255e9cd840e76b561f60e99bd22acf777c0c4549a35f"}, 0x0, [], {0x0, 0x989680}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x8801}) 2018/04/05 19:45:36 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000000200000000000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000000000000000100", 0xcb, 0x10000}], 0x0, &(0x7f0000014300)) 2018/04/05 19:45:36 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0x18, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10}, 0x1}, 0x0) 2018/04/05 19:45:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xffffffffffffffff}) [ 71.699454] QAT: Invalid ioctl 2018/04/05 19:45:36 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0x6, 0x0, 0x0, 0x0, "0b01bd005fa217d9a44cd314bba7bdb1866e1fa23dc4255e9cd840e76b561f60e99bd22acf777c0c4549a35f"}, 0x0, [], {0x0, 0x989680}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x8801}) [ 71.866563] QAT: Invalid ioctl 2018/04/05 19:45:37 executing program 5: semget$private(0x0, 0x0, 0x0) unshare(0x40600) r0 = inotify_init() fcntl$notify(r0, 0x0, 0x282) 2018/04/05 19:45:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xffffffffffffffff}) 2018/04/05 19:45:37 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000000200000000000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000000000000000100", 0xcb, 0x10000}], 0x0, &(0x7f0000014300)) 2018/04/05 19:45:37 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f000001b000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f000004a000), &(0x7f0000061ffc)=0x14a) 2018/04/05 19:45:37 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x4000020202, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000640)="17", 0x1) fallocate(r0, 0x11, 0x0, 0x40205) 2018/04/05 19:45:37 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0x6, 0x0, 0x0, 0x0, "0b01bd005fa217d9a44cd314bba7bdb1866e1fa23dc4255e9cd840e76b561f60e99bd22acf777c0c4549a35f"}, 0x0, [], {0x0, 0x989680}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x8801}) 2018/04/05 19:45:37 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="7ede1d5eb1011f25dd2abed3c443ef39d7cdf11edad90276d110a0be4923329dffa8cddf7b6fe79c1f213d479a427570bbfe87aa03d35e6b4dc48f86c115b831768d", 0x42, 0xfffffffffffffffe) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, r4, r5) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/31, 0x1f}], 0x3) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r2, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) close(r1) keyctl$get_keyring_id(0x0, r3, 0x8) 2018/04/05 19:45:37 executing program 2: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000003000)) [ 72.440330] QAT: Invalid ioctl 2018/04/05 19:45:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000019fc8)={&(0x7f0000607000)={0x10}, 0xc, &(0x7f000099c000)={&(0x7f0000a12000)={0x14, 0x12, 0x401, 0xffffffffffffffff, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/04/05 19:45:37 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d0500000000000000001040000000000000000200000000000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000000000000000100", 0xcb, 0x10000}], 0x0, &(0x7f0000014300)) 2018/04/05 19:45:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/04/05 19:45:37 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x125f, &(0x7f0000000080)) 2018/04/05 19:45:37 executing program 1: r0 = socket(0x10, 0x200000000803, 0x0) write(r0, &(0x7f00007c4000)="2600000022004701050007008980c5ff0200000800000000c0e9ff094a51f10101c71f3500b0", 0x26) recvmsg$netrom(r0, &(0x7f000088dfc8)={&(0x7f000023c000)=@ax25={0x3, {"8434321a3329b5"}}, 0x10, &(0x7f0000e11fd0), 0x0, &(0x7f000071f000)}, 0x0) 2018/04/05 19:45:37 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000025b000)='./file0\x00', 0x0) mount(&(0x7f00001a4ff2)='./file0/file0\x00', &(0x7f0000f89ff8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f000073afff)) unlinkat(r0, &(0x7f0000783ff8)='./file0\x00', 0x200) chdir(&(0x7f0000000040)='./file0\x00') getcwd(&(0x7f0000fde000), 0xfffffffffffffc22) [ 72.538811] random: crng init done 2018/04/05 19:45:37 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x3a, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 2018/04/05 19:45:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f00007f2000)=[{&(0x7f00002bc000)="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", 0x601}], 0x1) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) writev(r0, &(0x7f0000848000)=[{&(0x7f0000719000)="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", 0x201}], 0x1) 2018/04/05 19:45:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000003740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)='d', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/05 19:45:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000353000), 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) shutdown(r0, 0x1) 2018/04/05 19:45:38 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/04/05 19:45:38 executing program 6: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) 2018/04/05 19:45:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f00007f2000)=[{&(0x7f00002bc000)="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", 0x601}], 0x1) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) writev(r0, &(0x7f0000848000)=[{&(0x7f0000719000)="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", 0x201}], 0x1) 2018/04/05 19:45:38 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000002d40)=@ax25, 0x80, &(0x7f0000002e40)}}, {{&(0x7f0000002e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000031c0), 0x0, &(0x7f0000003200)=""/223, 0xdf}}], 0x2, 0x2003, 0x0) 2018/04/05 19:45:38 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00001f4000)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000640)) write$selinux_access(r0, &(0x7f0000000100)={'system_u:object_r:passwd_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20}, 0x3d) read(0xffffffffffffffff, &(0x7f0000000140)=""/138, 0x8a) close(r0) 2018/04/05 19:45:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="240000000104f50000f90000000008000a20faff0900010004e800603300000001ab001f", 0x24}], 0x1}, 0x0) sysfs$1(0x1, &(0x7f0000000040)='wlan1trusted\x00') [ 73.481198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/05 19:45:38 executing program 6: socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="598b3fa018", 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000000c0)={0x0, 0x0, 0x5e}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 73.527602] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/05 19:45:38 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/04/05 19:45:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001b40)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001b00)={&(0x7f00000019c0)=@polexpire={0xc0, 0x1b, 0x301, 0x0, 0x0, {{{@in=@loopback=0x7f000001, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x6e6bb1, 0x1}}}, 0xc0}, 0x1}, 0x0) 2018/04/05 19:45:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f00007f2000)=[{&(0x7f00002bc000)="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", 0x601}], 0x1) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) writev(r0, &(0x7f0000848000)=[{&(0x7f0000719000)="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", 0x201}], 0x1) 2018/04/05 19:45:38 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) r4 = socket(0xa, 0x0, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'bridge0\x00\x00 \x00'}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) dup2(r1, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) 2018/04/05 19:45:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000080)={0x20, 0x15, 0x401, 0x0, 0x0, {0x4000a}, [@nested={0xc, 0x0, [@typed={0x8, 0x2, @uid}]}]}, 0x20}, 0x1}, 0x0) [ 74.234893] device bridge0 entered promiscuous mode [ 74.962921] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 74.971576] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 74.979396] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 74.987471] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 74.995254] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 75.003335] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 75.011173] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 75.019291] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 75.027757] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 75.035544] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 198.882026] INFO: rcu_sched self-detected stall on CPU [ 198.887462] 1-....: (124998 ticks this GP) idle=9b2/1/4611686018427387906 softirq=22733/22733 fqs=31170 [ 198.897302] (t=125000 jiffies g=11599 c=11598 q=1619) [ 198.902651] NMI backtrace for cpu 1 [ 198.906259] CPU: 1 PID: 7184 Comm: syz-executor3 Not tainted 4.16.0+ #2 [ 198.912985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.922317] Call Trace: [ 198.924876] [ 198.927030] dump_stack+0x1b9/0x29f [ 198.930639] ? arch_local_irq_restore+0x52/0x52 [ 198.935287] ? lock_release+0xa10/0xa10 [ 198.939244] nmi_cpu_backtrace.cold.4+0x19/0xce [ 198.943893] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 198.949063] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 198.954319] arch_trigger_cpumask_backtrace+0x14/0x20 [ 198.959490] rcu_dump_cpu_stacks+0x175/0x1c2 [ 198.963876] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 198.968877] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 198.974308] ? print_other_cpu_stall+0x4a0/0x4a0 [ 198.979049] ? debug_check_no_locks_freed+0x310/0x310 [ 198.984217] ? find_held_lock+0x36/0x1c0 [ 198.988264] ? zap_class+0x720/0x720 [ 198.991954] ? lock_downgrade+0x8e0/0x8e0 [ 198.996082] ? perf_trace_lock+0xd6/0x900 [ 199.000207] ? zap_class+0x720/0x720 [ 199.003898] ? graph_lock+0x170/0x170 [ 199.007690] ? graph_lock+0x170/0x170 [ 199.011482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.017000] ? graph_lock+0x170/0x170 [ 199.020787] ? graph_lock+0x170/0x170 [ 199.024576] ? __lock_is_held+0xb5/0x140 [ 199.028623] rcu_check_callbacks+0x21b/0xad0 [ 199.033017] ? rcu_cpu_stall_reset+0x210/0x210 [ 199.037587] ? trace_hardirqs_off+0xd/0x10 [ 199.041803] ? raise_softirq+0x1b2/0x450 [ 199.045845] ? raise_softirq_irqoff+0x310/0x310 [ 199.050495] ? read_boot_clock64+0x70/0x70 [ 199.054713] ? account_guest_time+0x3d0/0x3d0 [ 199.059190] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 199.064707] ? hrtimer_run_queues+0x70/0x300 [ 199.069098] ? run_local_timers+0x168/0x1d0 [ 199.073398] ? timer_clear_idle+0x50/0x50 [ 199.077528] ? account_system_time+0x7f/0xb0 [ 199.081915] ? account_process_tick+0x76/0x240 [ 199.086477] update_process_times+0x2d/0x70 [ 199.090782] tick_sched_handle+0xa0/0x180 [ 199.094911] tick_sched_timer+0x42/0x130 [ 199.098950] __hrtimer_run_queues+0x3e3/0x10a0 [ 199.103526] ? tick_sched_do_timer+0x100/0x100 [ 199.108090] ? hrtimer_start_range_ns+0xd10/0xd10 [ 199.113786] ? pvclock_read_flags+0x160/0x160 [ 199.118261] ? kvm_clock_read+0x25/0x30 [ 199.122218] ? kvm_clock_read+0x25/0x30 [ 199.126172] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 199.131169] ? ktime_get_update_offsets_now+0x3a6/0x570 [ 199.136515] ? do_timer+0x50/0x50 [ 199.139964] ? rcu_nmi_exit+0xd7/0x2b0 [ 199.143838] ? do_raw_spin_lock+0xc1/0x200 [ 199.148057] hrtimer_interrupt+0x286/0x650 [ 199.152281] smp_apic_timer_interrupt+0x15d/0x710 [ 199.157104] ? smp_call_function_single_interrupt+0x650/0x650 [ 199.162966] ? _raw_spin_lock+0x32/0x40 [ 199.166931] ? _raw_spin_unlock+0x22/0x30 [ 199.171059] ? handle_edge_irq+0x330/0x870 [ 199.175278] ? task_prio+0x50/0x50 [ 199.178807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.183634] apic_timer_interrupt+0xf/0x20 [ 199.187846] [ 199.190070] RIP: 0010:__sanitizer_cov_trace_pc+0x2b/0x50 [ 199.195498] RSP: 0018:ffff8801cfe77710 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 199.203187] RAX: ffff8801d0108080 RBX: 0000000000000004 RCX: ffffffff85a1f955 [ 199.210436] RDX: 0000000000000002 RSI: ffffffff85a1f95f RDI: 0000000000000005 [ 199.217685] RBP: ffff8801cfe77710 R08: ffff8801d0108080 R09: 0000000000000006 [ 199.224933] R10: ffff8801d0108080 R11: 0000000000000000 R12: 0000000000000001 [ 199.232181] R13: ffff8801ceb2cd80 R14: ffff8801aaacec00 R15: ffffffffffffffe0 [ 199.239446] ? snd_pcm_oss_write3+0x165/0x220 [ 199.243919] ? snd_pcm_oss_write3+0x16f/0x220 [ 199.248396] snd_pcm_oss_write3+0x16f/0x220 [ 199.252703] io_playback_transfer+0x274/0x310 [ 199.257179] ? lock_downgrade+0x8e0/0x8e0 [ 199.261315] snd_pcm_plug_write_transfer+0x36c/0x470 [ 199.266403] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 199.272098] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 199.277093] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 199.282790] snd_pcm_oss_write2+0x25c/0x460 [ 199.287096] ? snd_pcm_oss_write3+0x220/0x220 [ 199.291572] ? compat_start_thread+0x80/0x80 [ 199.295967] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.300531] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 199.305541] snd_pcm_oss_sync1+0x332/0x5a0 [ 199.309762] ? snd_pcm_oss_write2+0x460/0x460 [ 199.314244] ? locks_remove_posix+0x489/0x890 [ 199.318726] ? perf_trace_lock+0x900/0x900 [ 199.322948] ? wake_up_q+0x100/0x100 [ 199.326646] ? snd_pcm_format_set_silence+0x203/0x540 [ 199.331823] snd_pcm_oss_sync.isra.29+0x790/0x980 [ 199.336645] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 199.341043] ? fsnotify_first_mark+0x330/0x330 [ 199.345609] snd_pcm_oss_release+0x214/0x290 [ 199.349998] ? snd_pcm_oss_sync.isra.29+0x980/0x980 [ 199.355002] __fput+0x34d/0x890 [ 199.358270] ? fput+0x1a0/0x1a0 [ 199.361534] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.366021] ____fput+0x15/0x20 [ 199.369285] task_work_run+0x1e4/0x290 [ 199.373153] ? task_work_cancel+0x240/0x240 [ 199.377460] ? exit_to_usermode_loop+0x87/0x310 [ 199.382113] exit_to_usermode_loop+0x2bd/0x310 [ 199.386686] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 199.391519] ? ksys_ioctl+0x81/0xd0 [ 199.395129] do_syscall_64+0x792/0x9d0 [ 199.398998] ? vmalloc_sync_all+0x30/0x30 [ 199.403135] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.407611] ? finish_task_switch+0x1ca/0x820 [ 199.412089] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.416997] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.421917] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 199.427264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.432092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.437263] RIP: 0033:0x4552d9 [ 199.440433] RSP: 002b:00007f4e5ffe6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 199.448121] RAX: 0000000000000000 RBX: 00007f4e5ffe76d4 RCX: 00000000004552d9 [ 199.455371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 199.462619] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.469867] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 199.477128] R13: 0000000000000052 R14: 00000000006f3850 R15: 0000000000000000 [ 201.695079] INFO: rcu_sched detected expedited stalls on CPUs/tasks: { 1-... } 127452 jiffies s: 2685 root: 0x2/. [ 201.705862] blocking rcu_node structures: [ 201.710062] Task dump for CPU 1: [ 201.713449] syz-executor3 R running task 24120 7184 4559 0x0000000c [ 201.720677] Call Trace: [ 201.723297] ? wake_up_q+0x100/0x100 [ 201.727047] ? snd_pcm_format_set_silence+0x203/0x540 [ 201.732268] ? snd_pcm_oss_sync.isra.29+0x790/0x980 [ 201.737313] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 201.741754] ? fsnotify_first_mark+0x330/0x330 [ 201.746369] ? snd_pcm_oss_release+0x214/0x290 [ 201.750981] ? snd_pcm_oss_sync.isra.29+0x980/0x980 [ 201.756045] ? __fput+0x34d/0x890 [ 201.759625] ? fput+0x1a0/0x1a0 [ 201.762939] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.767468] ? ____fput+0x15/0x20 [ 201.770949] ? task_work_run+0x1e4/0x290 [ 201.775056] ? task_work_cancel+0x240/0x240 [ 201.779408] ? exit_to_usermode_loop+0x87/0x310 [ 201.784111] ? exit_to_usermode_loop+0x2bd/0x310 [ 201.788893] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 201.793759] ? ksys_ioctl+0x81/0xd0 [ 201.797425] ? do_syscall_64+0x792/0x9d0 [ 201.801514] ? vmalloc_sync_all+0x30/0x30 [ 201.805691] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.810216] ? finish_task_switch+0x1ca/0x820 [ 201.814743] ? syscall_return_slowpath+0x5c0/0x5c0 [ 201.819701] ? syscall_return_slowpath+0x30f/0x5c0 [ 201.824674] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 201.830069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.834945] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7