[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 21.934906] sshd (4497) used greatest stack depth: 16456 bytes left Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. 2018/04/21 01:40:54 fuzzer started 2018/04/21 01:40:55 dialing manager at 10.128.0.26:39431 syzkaller login: [ 51.545200] can: request_module (can-proto-0) failed. [ 51.554446] can: request_module (can-proto-0) failed. 2018/04/21 01:41:19 kcov=true, comps=true 2018/04/21 01:41:21 executing program 0: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0x101}) 2018/04/21 01:41:21 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x18, r1) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='vmnet1trustedselflo+self\x00', 0xfffffffffffffffa) 2018/04/21 01:41:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) 2018/04/21 01:41:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) 2018/04/21 01:41:21 executing program 4: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/21 01:41:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80100080044d00, &(0x7f0000002000)) 2018/04/21 01:41:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x41, &(0x7f0000000040)) 2018/04/21 01:41:21 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b5ffc), 0x4) [ 55.266775] IPVS: ftp: loaded support on port[0] = 21 [ 55.277621] IPVS: ftp: loaded support on port[0] = 21 [ 55.279555] IPVS: ftp: loaded support on port[0] = 21 [ 55.304488] IPVS: ftp: loaded support on port[0] = 21 [ 55.320690] IPVS: ftp: loaded support on port[0] = 21 [ 55.335625] IPVS: ftp: loaded support on port[0] = 21 [ 55.344429] IPVS: ftp: loaded support on port[0] = 21 [ 55.351577] IPVS: ftp: loaded support on port[0] = 21 [ 56.069551] ip (4654) used greatest stack depth: 16328 bytes left [ 57.316324] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.323137] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.361251] device bridge_slave_0 entered promiscuous mode [ 57.399066] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.405514] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.426276] device bridge_slave_0 entered promiscuous mode [ 57.465978] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.472441] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.496884] device bridge_slave_1 entered promiscuous mode [ 57.525336] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.531919] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.566083] device bridge_slave_0 entered promiscuous mode [ 57.585599] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.592056] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.604829] device bridge_slave_1 entered promiscuous mode [ 57.612069] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.618487] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.637062] device bridge_slave_0 entered promiscuous mode [ 57.653603] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.660081] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.669233] device bridge_slave_0 entered promiscuous mode [ 57.697579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.707796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.716998] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.723505] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.756280] device bridge_slave_1 entered promiscuous mode [ 57.768516] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.774978] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.801009] device bridge_slave_1 entered promiscuous mode [ 57.812380] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.818819] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.826856] device bridge_slave_0 entered promiscuous mode [ 57.850184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.862283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.869540] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.875964] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.909523] device bridge_slave_1 entered promiscuous mode [ 57.920188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.927271] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.933684] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.964718] device bridge_slave_0 entered promiscuous mode [ 57.973672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.982529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.001789] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.008260] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.043228] device bridge_slave_1 entered promiscuous mode [ 58.054512] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.060953] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.090443] device bridge_slave_0 entered promiscuous mode [ 58.120894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.129936] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.136500] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.157224] device bridge_slave_1 entered promiscuous mode [ 58.175335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.184672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.202801] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.264562] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.271227] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.306517] device bridge_slave_1 entered promiscuous mode [ 58.329669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.342164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.352121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.359717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.375996] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.425705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.480404] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.503842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.545981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.566693] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.576214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.616664] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.663341] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.692120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.714128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.721391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.765872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.776323] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.791247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.803087] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.831430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.838390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.899363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.906348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.927511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.948000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.959664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.966661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.994317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.003065] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.012730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.019607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.041139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.049613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.084912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.154592] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.177445] team0: Port device team_slave_0 added [ 59.187958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.198733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.215974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.271226] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.296515] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.318978] team0: Port device team_slave_0 added [ 59.333985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.344705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.357519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.371774] team0: Port device team_slave_0 added [ 59.388058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.409172] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.434755] team0: Port device team_slave_1 added [ 59.442749] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.456270] team0: Port device team_slave_0 added [ 59.467226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.476270] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.483818] team0: Port device team_slave_1 added [ 59.522269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.537163] team0: Port device team_slave_1 added [ 59.562739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.578291] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.596785] team0: Port device team_slave_1 added [ 59.616930] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.626420] team0: Port device team_slave_0 added [ 59.653823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.674396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.717781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.732081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.740713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.769611] team0: Port device team_slave_1 added [ 59.780300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.790463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.814388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.823693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.832771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.855082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.871075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.889560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.905729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.914762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.922930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.931273] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.938785] team0: Port device team_slave_0 added [ 59.944479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.960541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.970584] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.991903] team0: Port device team_slave_0 added [ 60.003189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.012822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.019925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.045762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.061053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.082803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.090689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.098688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.106553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.114520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.124817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.134586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.145485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.163895] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.177288] team0: Port device team_slave_1 added [ 60.191744] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.204957] team0: Port device team_slave_0 added [ 60.210774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.229876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.246141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.255067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.263329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.271333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.280066] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.287582] team0: Port device team_slave_1 added [ 60.294708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.302822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.315878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.325796] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.344777] team0: Port device team_slave_1 added [ 60.367442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.376803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.400264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.415553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.424823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.432832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.441378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.449348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.457399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.478328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.488771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.497996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.505807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.519928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.557980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.586824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.597430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.605353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.615277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.626764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.640924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.654676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.670215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.691948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.718493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.741279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.752964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.770513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.796913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.810347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.817515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.853761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.879014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.898211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.915743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.937296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.967741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.003786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.013425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.021201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.032497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.057553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.070613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.144384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.151663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.166424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.830917] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.837593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.844801] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.851236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.863072] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 61.873455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.893343] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.899794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.906483] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.912877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.955871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 61.971744] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.978206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.984939] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.991364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.009085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.037984] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.044448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.051190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.057611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.102807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.125102] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.131571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.138305] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.144723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.193921] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.444793] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.451247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.457940] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.464330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.486116] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.495593] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.502065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.508757] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.516043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.536971] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.682682] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.689129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.695847] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.702247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.755339] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.880490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.888835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.898877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.906683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.915101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.923574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.931763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.163451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.316707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.386222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.414960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.482927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.572605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.687207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.739376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.817282] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.849344] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.863799] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.961819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.016094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.054700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.199667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.206249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.218830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.246254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.293300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.299650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.308953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.338638] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.346596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.358888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.393428] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.424360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.449764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.529480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.539362] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.545701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.565667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.665914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.672323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.683702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.727926] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.750436] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.785816] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.792199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.804638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.887605] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.975849] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.107654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 69.113976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.124619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.159925] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.239762] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.287210] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.596009] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 01:41:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b5ffc), 0x4) 2018/04/21 01:41:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{}]}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="c37cd6b17f5eb41fc1dc4bd30b1b1a2709f4305a7fbcd8322464debf1808315531830f522d89e166f30a3ca355ea7d05e62bd947dc4de5e86908835b0253f70b0a3ad76c47447b34d7063e21167f928d164890d9514e5334ef8ed6d5146f9e87edad454281737cd7007c30e1d5a4024aa62be6be10a5e002c947720bccd49be9b93e9f7532db86e5fa686f1de91300b834956f477d0080e3bf3d49a91eeb770dbf00e4657d4bb8dab7df78edb23b53e2bbf6d7d3c10753a3986c91791df9", 0xbe}], 0x1) 2018/04/21 01:41:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80100080044d00, &(0x7f0000002000)) 2018/04/21 01:41:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b5ffc), 0x4) 2018/04/21 01:41:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{}]}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="c37cd6b17f5eb41fc1dc4bd30b1b1a2709f4305a7fbcd8322464debf1808315531830f522d89e166f30a3ca355ea7d05e62bd947dc4de5e86908835b0253f70b0a3ad76c47447b34d7063e21167f928d164890d9514e5334ef8ed6d5146f9e87edad454281737cd7007c30e1d5a4024aa62be6be10a5e002c947720bccd49be9b93e9f7532db86e5fa686f1de91300b834956f477d0080e3bf3d49a91eeb770dbf00e4657d4bb8dab7df78edb23b53e2bbf6d7d3c10753a3986c91791df9", 0xbe}], 0x1) 2018/04/21 01:41:38 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b5ffc), 0x4) 2018/04/21 01:41:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80100080044d00, &(0x7f0000002000)) 2018/04/21 01:41:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{}]}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="c37cd6b17f5eb41fc1dc4bd30b1b1a2709f4305a7fbcd8322464debf1808315531830f522d89e166f30a3ca355ea7d05e62bd947dc4de5e86908835b0253f70b0a3ad76c47447b34d7063e21167f928d164890d9514e5334ef8ed6d5146f9e87edad454281737cd7007c30e1d5a4024aa62be6be10a5e002c947720bccd49be9b93e9f7532db86e5fa686f1de91300b834956f477d0080e3bf3d49a91eeb770dbf00e4657d4bb8dab7df78edb23b53e2bbf6d7d3c10753a3986c91791df9", 0xbe}], 0x1) [ 72.364620] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:41:38 executing program 0: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0x101}) 2018/04/21 01:41:38 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000000080101fffffeffffffffff000000000c000100010000007f0000010c0002000000907f31202efe"], 0x2c}, 0x1}, 0x0) 2018/04/21 01:41:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{}]}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="c37cd6b17f5eb41fc1dc4bd30b1b1a2709f4305a7fbcd8322464debf1808315531830f522d89e166f30a3ca355ea7d05e62bd947dc4de5e86908835b0253f70b0a3ad76c47447b34d7063e21167f928d164890d9514e5334ef8ed6d5146f9e87edad454281737cd7007c30e1d5a4024aa62be6be10a5e002c947720bccd49be9b93e9f7532db86e5fa686f1de91300b834956f477d0080e3bf3d49a91eeb770dbf00e4657d4bb8dab7df78edb23b53e2bbf6d7d3c10753a3986c91791df9", 0xbe}], 0x1) 2018/04/21 01:41:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80100080044d00, &(0x7f0000002000)) 2018/04/21 01:41:38 executing program 4: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/21 01:41:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x41, &(0x7f0000000040)) 2018/04/21 01:41:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) 2018/04/21 01:41:38 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) [ 72.443005] device ip6_vti0 entered promiscuous mode 2018/04/21 01:41:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) 2018/04/21 01:41:38 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) [ 72.517728] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 72.541233] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:41:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) 2018/04/21 01:41:39 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) 2018/04/21 01:41:39 executing program 4: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/21 01:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000000080101fffffeffffffffff000000000c000100010000007f0000010c0002000000907f31202efe"], 0x2c}, 0x1}, 0x0) 2018/04/21 01:41:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x41, &(0x7f0000000040)) 2018/04/21 01:41:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) [ 72.779955] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 72.887572] device ip6_vti0 entered promiscuous mode 2018/04/21 01:41:39 executing program 0: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0x101}) 2018/04/21 01:41:39 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 2018/04/21 01:41:39 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) 2018/04/21 01:41:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) 2018/04/21 01:41:39 executing program 4: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/21 01:41:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x41, &(0x7f0000000040)) 2018/04/21 01:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000000080101fffffeffffffffff000000000c000100010000007f0000010c0002000000907f31202efe"], 0x2c}, 0x1}, 0x0) 2018/04/21 01:41:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f00000002c0)=""/197, 0xfffffffffffffd57, &(0x7f0000000100)=""/131, 0x0, 0x2}}, 0x68) 2018/04/21 01:41:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/21 01:41:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) [ 73.004268] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 73.019837] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:41:39 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 2018/04/21 01:41:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/21 01:41:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 2018/04/21 01:41:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002271, &(0x7f0000000000)) [ 73.111863] binder: 6733:6734 transaction failed 29189/-22, size 40-8 line 2848 2018/04/21 01:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000000080101fffffeffffffffff000000000c000100010000007f0000010c0002000000907f31202efe"], 0x2c}, 0x1}, 0x0) [ 73.158200] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:41:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) [ 73.207131] binder: 6733:6747 transaction failed 29189/-22, size 40-8 line 2848 [ 73.328097] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 73.385337] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:41:39 executing program 0: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0x101}) 2018/04/21 01:41:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/21 01:41:39 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 2018/04/21 01:41:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 2018/04/21 01:41:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002271, &(0x7f0000000000)) 2018/04/21 01:41:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/04/21 01:41:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/21 01:41:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 73.435626] device ip6_vti0 entered promiscuous mode [ 73.499804] binder: 6770:6774 transaction failed 29189/-22, size 40-8 line 2848 [ 73.518846] binder: 6766:6777 transaction failed 29189/-22, size 40-8 line 2848 2018/04/21 01:41:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/21 01:41:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 2018/04/21 01:41:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002271, &(0x7f0000000000)) 2018/04/21 01:41:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/04/21 01:41:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 73.553236] IPVS: ftp: loaded support on port[0] = 21 [ 73.561865] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.572522] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:41:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/21 01:41:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 2018/04/21 01:41:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 73.851461] binder: 6808:6809 transaction failed 29189/-22, size 40-8 line 2848 [ 73.893904] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.929514] device ip6_vti0 entered promiscuous mode 2018/04/21 01:41:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002271, &(0x7f0000000000)) 2018/04/21 01:41:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockname$inet(r1, &(0x7f0000000180)={0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10) 2018/04/21 01:41:40 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 2018/04/21 01:41:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/21 01:41:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000240)=0x1000000001, 0x3c5) sendmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x15, &(0x7f0000000480), 0x1}, 0x20000041) 2018/04/21 01:41:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 2018/04/21 01:41:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/21 01:41:40 executing program 0: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:40 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) [ 74.044753] binder: 6820:6827 transaction failed 29189/-22, size 40-8 line 2848 [ 74.048948] binder: 6829:6830 transaction failed 29189/-22, size 40-8 line 2848 [ 74.056382] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:41:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000240)=0x1000000001, 0x3c5) sendmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x15, &(0x7f0000000480), 0x1}, 0x20000041) 2018/04/21 01:41:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) 2018/04/21 01:41:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockname$inet(r1, &(0x7f0000000180)={0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10) [ 74.098541] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.127564] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.393374] device lo entered promiscuous mode [ 74.407734] device lo entered promiscuous mode 2018/04/21 01:41:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) 2018/04/21 01:41:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockname$inet(r1, &(0x7f0000000180)={0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10) 2018/04/21 01:41:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000240)=0x1000000001, 0x3c5) sendmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x15, &(0x7f0000000480), 0x1}, 0x20000041) 2018/04/21 01:41:40 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/04/21 01:41:40 executing program 0: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:40 executing program 5: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) [ 74.655879] IPVS: ftp: loaded support on port[0] = 21 [ 74.666495] FAT-fs (loop4): bogus number of reserved sectors [ 74.669060] binder: 6866:6867 transaction failed 29189/-22, size 40-8 line 2848 [ 74.672678] FAT-fs (loop4): Can't find a valid FAT filesystem 2018/04/21 01:41:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000240)=0x1000000001, 0x3c5) sendmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x15, &(0x7f0000000480), 0x1}, 0x20000041) 2018/04/21 01:41:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockname$inet(r1, &(0x7f0000000180)={0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10) [ 74.712712] IPVS: ftp: loaded support on port[0] = 21 [ 74.725679] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.906249] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 75.017577] device lo entered promiscuous mode [ 75.029849] device lo entered promiscuous mode 2018/04/21 01:41:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:41 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) 2018/04/21 01:41:41 executing program 6: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) 2018/04/21 01:41:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:41 executing program 0: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:41 executing program 5: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) [ 75.169348] FAT-fs (loop4): bogus number of reserved sectors [ 75.175391] FAT-fs (loop4): Can't find a valid FAT filesystem [ 75.183549] IPVS: ftp: loaded support on port[0] = 21 [ 75.189944] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:41:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) [ 75.219563] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:41:41 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) 2018/04/21 01:41:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) [ 75.295898] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) 2018/04/21 01:41:41 executing program 7: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x148}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 75.505687] FAT-fs (loop7): bogus number of reserved sectors [ 75.511686] FAT-fs (loop7): Can't find a valid FAT filesystem [ 75.580123] FAT-fs (loop4): bogus number of reserved sectors [ 75.586098] FAT-fs (loop4): Can't find a valid FAT filesystem [ 75.612458] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000203) [ 75.663962] device lo entered promiscuous mode [ 75.683280] device lo entered promiscuous mode [ 75.700205] device lo entered promiscuous mode [ 75.718504] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) 2018/04/21 01:41:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001780)=""/97, &(0x7f0000001800)=0x61) 2018/04/21 01:41:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:42 executing program 7: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:42 executing program 5: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:42 executing program 6: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:42 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:42 executing program 0: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) [ 75.875233] IPVS: ftp: loaded support on port[0] = 21 [ 75.895299] FAT-fs (loop7): bogus number of reserved sectors [ 75.901305] FAT-fs (loop7): Can't find a valid FAT filesystem [ 75.906355] IPVS: ftp: loaded support on port[0] = 21 [ 75.918275] FAT-fs (loop1): bogus number of reserved sectors [ 75.924307] FAT-fs (loop1): Can't find a valid FAT filesystem 2018/04/21 01:41:42 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000500)}) [ 75.953544] IPVS: ftp: loaded support on port[0] = 21 [ 75.969212] FAT-fs (loop4): bogus number of reserved sectors [ 75.975212] FAT-fs (loop4): Can't find a valid FAT filesystem [ 76.061409] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000203) [ 76.073685] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000203) 2018/04/21 01:41:42 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:42 executing program 7: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 76.151330] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 76.180250] binder: 6989:6990 got new transaction with bad transaction stack, transaction 10 has target 6989:0 [ 76.190806] binder: 6989:6990 transaction failed 29201/-71, size 0-0 line 2875 2018/04/21 01:41:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x24}, 0x1}, 0x100000000000) [ 76.273799] binder: BINDER_SET_CONTEXT_MGR already set [ 76.295525] FAT-fs (loop1): bogus number of reserved sectors [ 76.301542] FAT-fs (loop1): Can't find a valid FAT filesystem [ 76.338906] binder: 6989:6999 ioctl 40046207 0 returned -16 [ 76.346160] FAT-fs (loop7): bogus number of reserved sectors [ 76.352125] FAT-fs (loop7): Can't find a valid FAT filesystem [ 76.373378] binder_alloc: 6989: binder_alloc_buf, no vma [ 76.379332] binder: 6989:6990 transaction failed 29189/-3, size 40-8 line 2963 2018/04/21 01:41:42 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) [ 76.444564] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000203) [ 76.447510] device lo entered promiscuous mode [ 76.461975] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000203) [ 76.504689] device lo entered promiscuous mode [ 76.534458] device lo entered promiscuous mode 2018/04/21 01:41:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x24}, 0x1}, 0x100000000000) [ 76.608289] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.614999] binder: release 6989:6990 transaction 10 out, still active [ 76.622118] binder: unexpected work type, 4, not freed [ 76.627465] binder: undelivered TRANSACTION_COMPLETE [ 76.632636] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.638534] binder: send failed reply for transaction 10, target dead 2018/04/21 01:41:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x24}, 0x1}, 0x100000000000) 2018/04/21 01:41:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/21 01:41:43 executing program 6: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr}}) 2018/04/21 01:41:43 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@errors_continue='errors=continue', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/21 01:41:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:43 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) [ 76.803693] IPVS: ftp: loaded support on port[0] = 21 [ 76.817498] binder: 7031:7034 got new transaction with bad transaction stack, transaction 16 has target 7031:0 [ 76.819988] FAT-fs (loop1): bogus number of reserved sectors [ 76.827916] binder: 7031:7034 transaction failed 29201/-71, size 0-0 line 2875 [ 76.833739] FAT-fs (loop1): Can't find a valid FAT filesystem 2018/04/21 01:41:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x24}, 0x1}, 0x100000000000) 2018/04/21 01:41:43 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) [ 76.986716] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000203) 2018/04/21 01:41:43 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:43 executing program 1: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) 2018/04/21 01:41:43 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000500)}) [ 77.153694] binder: release 7031:7034 transaction 16 out, still active [ 77.160681] binder: unexpected work type, 4, not freed [ 77.166090] binder: undelivered TRANSACTION_COMPLETE [ 77.171273] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.176839] binder: send failed reply for transaction 16, target dead [ 77.275744] binder: 7083:7086 got new transaction with bad transaction stack, transaction 21 has target 7083:0 [ 77.287131] binder: 7083:7086 transaction failed 29201/-71, size 0-0 line 2875 [ 77.360626] device lo entered promiscuous mode [ 77.452459] binder: release 7083:7086 transaction 21 out, still active [ 77.459344] binder: unexpected work type, 4, not freed [ 77.464678] binder: undelivered TRANSACTION_COMPLETE [ 77.469830] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.475368] binder: send failed reply for transaction 21, target dead 2018/04/21 01:41:44 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/21 01:41:44 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:44 executing program 1: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) 2018/04/21 01:41:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:44 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) 2018/04/21 01:41:44 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:44 executing program 6: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) [ 77.753455] binder: 7115:7122 got new transaction with bad transaction stack, transaction 26 has target 7115:0 [ 77.763843] binder: 7115:7122 transaction failed 29201/-71, size 0-0 line 2875 2018/04/21 01:41:44 executing program 1: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) 2018/04/21 01:41:44 executing program 6: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) 2018/04/21 01:41:44 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:44 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000480), 0x1001, &(0x7f0000000500)) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 2018/04/21 01:41:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/21 01:41:44 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) 2018/04/21 01:41:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='-/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 77.987482] binder: release 7115:7122 transaction 26 out, still active [ 77.994379] binder: unexpected work type, 4, not freed [ 77.999747] binder: undelivered TRANSACTION_COMPLETE [ 78.004921] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.010493] binder: send failed reply for transaction 26, target dead 2018/04/21 01:41:45 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='-/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:45 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) 2018/04/21 01:41:45 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:45 executing program 1: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) 2018/04/21 01:41:45 executing program 6: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003ff4)) preadv(r0, &(0x7f00006a6000)=[{&(0x7f0000005000)=""/2, 0x2}], 0x1, 0x0) 2018/04/21 01:41:45 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) 2018/04/21 01:41:45 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0xfffffffffffffffc, 0xf, &(0x7f00000004c0)=""/24) 2018/04/21 01:41:45 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0xfffffffffffffffc, 0xf, &(0x7f00000004c0)=""/24) 2018/04/21 01:41:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='-/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:45 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0xfffffffffffffffc, 0xf, &(0x7f00000004c0)=""/24) 2018/04/21 01:41:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='-/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:45 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0xfffffffffffffffc, 0xf, &(0x7f00000004c0)=""/24) 2018/04/21 01:41:45 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/204, 0xcc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x200000011, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fsync(r0) 2018/04/21 01:41:45 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x40000400000a5}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x730000, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:45 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x40000400000a5}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x730000, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:46 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:46 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x40000400000a5}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x730000, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:46 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) 2018/04/21 01:41:46 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) 2018/04/21 01:41:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:46 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x6}, 0x8, 0x0) r2 = getpid() r3 = gettid() readv(r1, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r2, r3, 0x3) dup2(r0, r1) 2018/04/21 01:41:46 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x40000400000a5}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x730000, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:47 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/204, 0xcc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x200000011, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fsync(r0) 2018/04/21 01:41:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:47 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f600000, 0x80800) read$eventfd(r0, &(0x7f0000047ff8), 0x8) 2018/04/21 01:41:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/204, 0xcc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x200000011, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fsync(r0) 2018/04/21 01:41:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x6, @in=@multicast1=0xe0000001, 0x0, 0x8}]}]}, 0x16c}, 0x1}, 0x0) 2018/04/21 01:41:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:48 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000f40)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d2ae80", 0x18, 0x2f, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bf1fec", 0x0, "cc272c"}}}}}}}, 0x0) 2018/04/21 01:41:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:49 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)={[0x36]}, 0x1) 2018/04/21 01:41:49 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="b234d1ddb716b124dd223418acbcd1dea8887973ad625d9ed2b31e6d97c5fb65bec3c17c71963d6bb1a131f1ec18564ba7135284b9fff200f6c91ddb82f43388708802a1c6f6920b15ad6e380b3820fb7f806ce4e3565228f7f3204cab551e82f31b6726fd601278d1dba8357b0e5e5922497a415fe0f6e9d031038444aba6778c6819448d7bf1673025168bd737ff60b70db5d56bff1f1e67d467022c62cac400c3b187e3b8458627e5f6788e6b85bac4acd164630de79d280d465f7886f1a0c8c3012c356d636e2b31d88b8ee6a67f01d9c2d8a9fe2e0d12336ea7d6375bcac4a8f16a179d232216dec8f3657a70ca69da8c8c66168bdf0ef6ec1926fb41add41a7106da5e2e5c60adb03e973afb9a625136f4076f51fd7d835dde482ea2cec3e04b08232fdb7093092118a17885b6e5f2734b3cc09246dc9d22f7acf81b4471740128e22759430b5855a724afeb2503f406df7157cad23b9547385253d9c6c8cbe04d31378d1158772e1bb1c9119855047a7698c3911532f6d34ebbc6b209bed4d0d63c21cddf8bbd48a05c110b5d25bbecb81ddcd5b7033502e91c5e18daa404e4789a363a0ad4bc68c237c389629c3a94370149b40a98b9d7009ebd1ca0075cc1440881e8448cd53e1416feb9aad8de7a8d8ce4394cb5e7f6d6f7aa802adaa615e31a612fec0cb8c17e83a37d39db46a911ae71f158c6d52c6e2e4bb421b861286a2a1d424557ec3d078615d718bd00d03b9e3d430e2ae97c44e0a8710d4549ba641e703031599a5ca132e29665df3caed2428058597fc47e70d3be1f0a3c86e462a0652f8bba54e36c4e1562c7ecd11c6ddf42da2a9cebcb3471a2249d5ad4d1bef5237ca7f470adf4f52432824f423e8eb08fd65fc577e5c6e0ac2fd05b1780ec0cd62f42b663e8bf6711115a1d105989d62f22c3a8a898ca9590997ce5285cb3afafe8ea64716e0d223d59975b11e9c7cfec5e31fef508131855457d7e0360919813c285e640ef520ffc163ee9819d2124fe6ab876905983c0bd754512f12207097e4b6972cb73cd0df60a3738907c80e23a8097c074baede04d677dfd8cce8dcaf4f8183dbc4ebad9b30679ce89c68b7712ba6a529d4bb58e77b69fdbbf2d05a902ab6e4003740b2a862773e6082264634d7e4365c84232d88dac5b0dd0a7c66f66a26e3747b7e4eb438889e4c8134b782b453e82a66d09678fc336e25ed8f6cc0e9f3bd84c2a626e6d3d87ef91c8d92d4721f92b524ef62297f2f6629a4b62be8bff6968e690873f666314c2cf62bdac9f1c0ce0d95b94b8835683cf1e393bb02f722e1cfe50bc7a80b59d70ec07ce0a7a812480abaac061fb0421633b5e1bff5cfeb7a92c10badd2aed9b81f979f9552929f47cb98fab19c106d512ba58da43f2ddf575be31b694cc1a9b01ffaa40e4df354e9f74b5902b26d1af3c1c0916b61c4555532837f1b169b004b891c4d0d77efe90d215bdec77f6540dd690cece0d6057474091b262b447218e7d564cb9eae24f605637d96bb5aab1021afbeb3cc692398afb2646c6d655c787a2b7e2553761be694463b5e6309f6541ea0d333d68bb719d2bbfaef41f3fa78037b29977340f1dc92454910b0be07a82d1aaf5e74a5e787a9487f381d8b9fdd132116d8de316e47e2de75663455f719f9ba7310222dc2ad760c346a9aa1b4a4255eb8c187e8b5a0f1ae733c25f9e1e107242abfdf2872276942d9fa0e4947e5363a2c90eaad5bbc32e8ef3f1670cfa49b202e586cf846ce0586479f7bd2b1c24e56b442e0a65b5859e0e89c6462e4800c35eb25aefcdca9ac00d82d7cd84bd2cc025e4d803154e434b5c3c4f47f6e72f0719225ce39904e5d1c168cce98e353e8f74b1f3cc7719cdd8991473202a8d3480a05e5638354bc22cc904e762bfe2e992967cce774629faffb61426143ed3c5147045ac493079fb26921d8f9a361933cbb199ab502325c43a77753c6bd5de823f64b84279df7e5ecc995fbc913253618bf30e5834c8a1de43d7bacc0f85150aa2d9d8ddf386851cc6e5cb41a7cee85668aef2aa2e681aac7ececdae386d512da12de258271dc6325c454aa12f9c260ea13b1bd84413814dc8e324c237d78ae1eeae05889aaa3f24aabf163358ca21bc1814bf9225eb904cb9b3f9327a13afeb421ea7f45e7c94d184eeca0347fcccb8eccb2dbdd571f14a466acde4d3d2a621671f40e33401ccf7705b161a7935916928801277850d8e819e616c818eef6347f8e84ef4e5a96d8e8b094fa93f3ac58e332ae043356e84eb37e1592f0d336f1e059cad33eabc9b7c2236a8c590c4428b57d9401c2b48c04b11e47e9586ee44efc3997fa60ba76a6555edd929838d635cd98c1ea224c93fd495a604156643356e5d7730d4eb6d539d04899d9021d70cb7c2842f103eb2efc9807ccbfbe10c0fd3639bec5b659f05466c2cc2ecede0ee89df3aa4166844e6eb87ed505582aa1ff7b897226637bd8e15d4bc64fd7c34a9bcf35c3ce89e7f286c0b00235b92c969bc644a17e26e50c2f010005da34dc55604d7ce372580b88caeb9b7b12aa2650c3efa97c81f44f7e78677e60ab27852260ac3312eebb9f0c5fb86644d7d26747e446b0e07e1fcf1ede6e5185829adab1349b33c17585a9a2f0c9d15cf95d8873b89ede585d010ff0944f8bab927b4ca5f3044ea74b04839ffe6d95f86efbc78f449a47a3524b62f2d920d79b16724bb2cd464758d4b1e247442ff6a60f95310c1e3fd37e357d7708b6c9d998d67d5492cc805d945a71a1567535319b0b1cff49c212807317940b7ad165b9e0b6532fb40da84fc463c7e8b6340bde1682ec2cc622dee977d1ef5e6a2b384e6aae288d60baaebc6f0572fd99bd1ed8e887382923f4b96cb392f6e239bef51d642ca297a1fd26a56f4464b89fd41beddae96109ff2f732b9275e4247ebe8f30459e0c6c974ae7916700d32c545b0699ca94289023314b9c9b9c895f8146fba9d97a648483097592ba02ccd8c3ea79ade4bd33d5c9756675b3176d5ee6cb4fa68181692a44028551aa35a42024a4fafc69e8df95becc75085cda9b214317042ef79ff244ee11dcab6f2bb3144b0ccf37afb4057870325bcb36a72f58bb3004c4f14a034199ff40edd7a18c55c5bc24df7c99a9a44683264b20c2f64b6928a89fbdf40761180f4fa68235cc10103bffbda33925476eb047403a252e4e9f1b92d960aecbb25283cba0d39a1e735bb385989fc1025bd4468211b9bdbc48276a05a8a1fa94a8f4901d0c6db77e25eed1c6b1dd224d7394d836e56b259e650cf696d81ca9b76fe28d232d7d08fa2293372d64359db8ae6c12c459c7ca8cac1db1a6cce99257732bf2671f5b15847bd641f70ddf92970b10495e1700e0e7c907d4ea7f782989993616e259f80b22e629c266bac92bb7c9ee33bbf1d39e7522a88c236ba7917df1f65b0f87e7086997810b8d4906da073a3924d2bd198eead1e2b96e54ca4a8eb6bd1b761d30cc40d259750151be5ec286fa38cda94ae8a18cea1547c071e7e65fa75ac1cd8635469649d6bea0feb9bb86b5b246e308cd98cee931138ac41574d804a4f79014fc076592cf0238e905efd7d0926739d64111273a259d1e7f0d15a5286494266c3b6f12cd5cab90b3cee9ee7b07108013f1c2f8f7449ba7782041f1714d27fb59330e54a908c4ad6af8c67d92c176aaff5c67545ddb8598026e2b19690acf236f3ac816692c8a9f4411bb7b77e55f2aa251f7ce3adb6f6b3a822a490846fecd6b7599879d13c2c558d92378c8b93284cfdc3f9194a902ac58c5884f04d5c52302a6cad97daf25edffd021912341e79b246057fade7ca556b37b5e9a43aeb78ccfe667bebc6c575301fe10582c23812934ae1b27ad992b82e3277916898f8a77deef08d621e501b1b9417d951c1c531ea8115699ad4e05b640f10e99a8826db60ecbe1e3cbb878b34ec99df51a50602e474444c295a7840372fc5789c721804edb6296e6e35ef509b818b15c284eafc4e96276c83b75fc6994bb3ff1fdbabda2c5e001d334f6f23ed09d67a0a1b88d52107781ad603be2355c36bb29015e624a451ddfb317d374255914ba0f6ffb2c88e12b72ef807ed53c89e8caa01b84f1ccd22077e69ff18d3c8d77f5cf213f2c59e2f9daa67e33fbef7f10391605ebd6af8dba0ec2d8c21d484a0173e451d92f8cfd8f52e88b147c0f7057435d939a5142b0a8ec3e3cd58a84e95a767ed391c5c87db7bf6f93a6dbcf7c8b97566f0e7d7934578434fa0453e4aeaaf1574a45716e165401b1625540b943273373e01ba43a2711b8d7952a870c90483b37ce7b3f8744e99dd49d3a0d32fddd705b00807da0ea88269e47a7094252457351b294dacb278cff80fc2b2f76e19e6858a6ea1c35fa3008b0aeea16fb234041e5b4349dc6706eaefb144881c65455757c55a958a24e27ed147c7274db4b3c0e9bcb6888488b663509e8a4f1e3326eb9d263f41198c4403e404c2c1f890b63d735b73c1505bea5297f2b2b99056ccf69670c492a759cf15e73bf32e156d8358ddbd77c96c60be51e6cae5e5a2fa6652aecff210c9eb7b5a5cc1515a3b0213bc2cb42f2b50394b8672709ac30b50713a37ec5c25f213e173f5c73567c34a8a004501f91934d5563f928edfcb0acba36ea063d1f688414d12d8f509833408964c866c5d7b6c89a7f0c97544a714a77fed28ee68607ff6dac985a30e49d0f311e25ac7e91b9a24f05bfc4377329ec79cb5c0cd14d0ca9ba305321760ddcd8b86f338474fa08b45740d9a60ea49057ec21e9fa7811fa9c8252427aa38d0bc08ff24a9fccc5c79ff692fa72bbf075e7c792c5d5bd5ba763ab224d2868ddaeb9fbe3cae22103b90b0b3b0869c64895a4444b65c4e074eeeae5b0786e662d6a79a2d4701b2f89ab4afd1e9ebebf91683d8d936e9f2a49c6dbd3dba826401273a34460648ad82ba9edba3aa5263aea423da8ebebee5034bf97340c9f071896e8be3d0cd2c4bde22c422b18bdad807f45eb44e1c61a4be64111075436c1fb0b44fabe3e2b4bdf5c9c561377c9b893cca7b397dcc25bf1271a677186ad496ceecf6aa4fe7db610ac5e75a71d0c3c011cb4099ac86484bafc1aedf9d34aa9d88b67d8976b22a64252ab130dbbe1c576c6b7200ffbd323a019342fc600287ed085b120a01769b865b7a94f862026dfa4a0cff99e004d5b104a66b2281d313229b542c83d4af4786a9816dee09ab3395388548048644c61dc3d39b33b03fbb743ed33b8f496312a097e3b5f4994bb8ca6e7f3becf1840c5b4883bf972da230b21247cb3799c2f2a07b282423218e580db31f5a6020e32d88ee9c46e2df88ae1524a734da18021932a654a6e3c6d8bca32b19c458da663df1de867b933798c6ce061c61e20d2bd9d96d2bc4d0625b0d510453afb6fd91b1a6cdbfb540bb933dece478cc8ef6a98054eb62aaf1fe8adb6e59da3d67e487d33887fdd9c8ce6798f827d415cb99f1874264e396041f30c38a68938221f71615fb5aae6bff42b3b425daa073084c85298fb56e1ceaed2978cb951d0291f82a6403e6da706ec2e7a67c431b00117b3acbbecc9ecb5b7d7e168b553a1bc938947d5c57741c10f43bc293730511cef8be8b16bd4f1810414b9fa5be4352fdade90a94c041acda18c0f6f19a2b883b119a81d8b8c18228c6d4cef0ba71c34563f61ec75af163d748f414e6e79ebf189dce063dc47e4cfa936524139e7eec789174502180950202eb4cbf1e79d3b3f1a0db19368b92", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x6, @in=@multicast1=0xe0000001, 0x0, 0x8}]}]}, 0x16c}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x80000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001a80)="f7186b15de27d191da1e4b9ab8b9d1099775827573", 0x15) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 2018/04/21 01:41:49 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000f40)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d2ae80", 0x18, 0x2f, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bf1fec", 0x0, "cc272c"}}}}}}}, 0x0) 2018/04/21 01:41:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000005002"]) 2018/04/21 01:41:49 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/204, 0xcc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x200000011, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fsync(r0) 2018/04/21 01:41:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x6, @in=@multicast1=0xe0000001, 0x0, 0x8}]}]}, 0x16c}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000f40)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d2ae80", 0x18, 0x2f, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bf1fec", 0x0, "cc272c"}}}}}}}, 0x0) 2018/04/21 01:41:49 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)={[0x36]}, 0x1) 2018/04/21 01:41:49 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'l\x00'}}, 0x40) 2018/04/21 01:41:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000005002"]) 2018/04/21 01:41:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x6, @in=@multicast1=0xe0000001, 0x0, 0x8}]}]}, 0x16c}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000f40)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d2ae80", 0x18, 0x2f, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bf1fec", 0x0, "cc272c"}}}}}}}, 0x0) 2018/04/21 01:41:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'l\x00'}}, 0x40) 2018/04/21 01:41:50 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)={[0x36]}, 0x1) 2018/04/21 01:41:50 executing program 6: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000005002"]) 2018/04/21 01:41:50 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="b234d1ddb716b124dd223418acbcd1dea8887973ad625d9ed2b31e6d97c5fb65bec3c17c71963d6bb1a131f1ec18564ba7135284b9fff200f6c91ddb82f43388708802a1c6f6920b15ad6e380b3820fb7f806ce4e3565228f7f3204cab551e82f31b6726fd601278d1dba8357b0e5e5922497a415fe0f6e9d031038444aba6778c6819448d7bf1673025168bd737ff60b70db5d56bff1f1e67d467022c62cac400c3b187e3b8458627e5f6788e6b85bac4acd164630de79d280d465f7886f1a0c8c3012c356d636e2b31d88b8ee6a67f01d9c2d8a9fe2e0d12336ea7d6375bcac4a8f16a179d232216dec8f3657a70ca69da8c8c66168bdf0ef6ec1926fb41add41a7106da5e2e5c60adb03e973afb9a625136f4076f51fd7d835dde482ea2cec3e04b08232fdb7093092118a17885b6e5f2734b3cc09246dc9d22f7acf81b4471740128e22759430b5855a724afeb2503f406df7157cad23b9547385253d9c6c8cbe04d31378d1158772e1bb1c9119855047a7698c3911532f6d34ebbc6b209bed4d0d63c21cddf8bbd48a05c110b5d25bbecb81ddcd5b7033502e91c5e18daa404e4789a363a0ad4bc68c237c389629c3a94370149b40a98b9d7009ebd1ca0075cc1440881e8448cd53e1416feb9aad8de7a8d8ce4394cb5e7f6d6f7aa802adaa615e31a612fec0cb8c17e83a37d39db46a911ae71f158c6d52c6e2e4bb421b861286a2a1d424557ec3d078615d718bd00d03b9e3d430e2ae97c44e0a8710d4549ba641e703031599a5ca132e29665df3caed2428058597fc47e70d3be1f0a3c86e462a0652f8bba54e36c4e1562c7ecd11c6ddf42da2a9cebcb3471a2249d5ad4d1bef5237ca7f470adf4f52432824f423e8eb08fd65fc577e5c6e0ac2fd05b1780ec0cd62f42b663e8bf6711115a1d105989d62f22c3a8a898ca9590997ce5285cb3afafe8ea64716e0d223d59975b11e9c7cfec5e31fef508131855457d7e0360919813c285e640ef520ffc163ee9819d2124fe6ab876905983c0bd754512f12207097e4b6972cb73cd0df60a3738907c80e23a8097c074baede04d677dfd8cce8dcaf4f8183dbc4ebad9b30679ce89c68b7712ba6a529d4bb58e77b69fdbbf2d05a902ab6e4003740b2a862773e6082264634d7e4365c84232d88dac5b0dd0a7c66f66a26e3747b7e4eb438889e4c8134b782b453e82a66d09678fc336e25ed8f6cc0e9f3bd84c2a626e6d3d87ef91c8d92d4721f92b524ef62297f2f6629a4b62be8bff6968e690873f666314c2cf62bdac9f1c0ce0d95b94b8835683cf1e393bb02f722e1cfe50bc7a80b59d70ec07ce0a7a812480abaac061fb0421633b5e1bff5cfeb7a92c10badd2aed9b81f979f9552929f47cb98fab19c106d512ba58da43f2ddf575be31b694cc1a9b01ffaa40e4df354e9f74b5902b26d1af3c1c0916b61c4555532837f1b169b004b891c4d0d77efe90d215bdec77f6540dd690cece0d6057474091b262b447218e7d564cb9eae24f605637d96bb5aab1021afbeb3cc692398afb2646c6d655c787a2b7e2553761be694463b5e6309f6541ea0d333d68bb719d2bbfaef41f3fa78037b29977340f1dc92454910b0be07a82d1aaf5e74a5e787a9487f381d8b9fdd132116d8de316e47e2de75663455f719f9ba7310222dc2ad760c346a9aa1b4a4255eb8c187e8b5a0f1ae733c25f9e1e107242abfdf2872276942d9fa0e4947e5363a2c90eaad5bbc32e8ef3f1670cfa49b202e586cf846ce0586479f7bd2b1c24e56b442e0a65b5859e0e89c6462e4800c35eb25aefcdca9ac00d82d7cd84bd2cc025e4d803154e434b5c3c4f47f6e72f0719225ce39904e5d1c168cce98e353e8f74b1f3cc7719cdd8991473202a8d3480a05e5638354bc22cc904e762bfe2e992967cce774629faffb61426143ed3c5147045ac493079fb26921d8f9a361933cbb199ab502325c43a77753c6bd5de823f64b84279df7e5ecc995fbc913253618bf30e5834c8a1de43d7bacc0f85150aa2d9d8ddf386851cc6e5cb41a7cee85668aef2aa2e681aac7ececdae386d512da12de258271dc6325c454aa12f9c260ea13b1bd84413814dc8e324c237d78ae1eeae05889aaa3f24aabf163358ca21bc1814bf9225eb904cb9b3f9327a13afeb421ea7f45e7c94d184eeca0347fcccb8eccb2dbdd571f14a466acde4d3d2a621671f40e33401ccf7705b161a7935916928801277850d8e819e616c818eef6347f8e84ef4e5a96d8e8b094fa93f3ac58e332ae043356e84eb37e1592f0d336f1e059cad33eabc9b7c2236a8c590c4428b57d9401c2b48c04b11e47e9586ee44efc3997fa60ba76a6555edd929838d635cd98c1ea224c93fd495a604156643356e5d7730d4eb6d539d04899d9021d70cb7c2842f103eb2efc9807ccbfbe10c0fd3639bec5b659f05466c2cc2ecede0ee89df3aa4166844e6eb87ed505582aa1ff7b897226637bd8e15d4bc64fd7c34a9bcf35c3ce89e7f286c0b00235b92c969bc644a17e26e50c2f010005da34dc55604d7ce372580b88caeb9b7b12aa2650c3efa97c81f44f7e78677e60ab27852260ac3312eebb9f0c5fb86644d7d26747e446b0e07e1fcf1ede6e5185829adab1349b33c17585a9a2f0c9d15cf95d8873b89ede585d010ff0944f8bab927b4ca5f3044ea74b04839ffe6d95f86efbc78f449a47a3524b62f2d920d79b16724bb2cd464758d4b1e247442ff6a60f95310c1e3fd37e357d7708b6c9d998d67d5492cc805d945a71a1567535319b0b1cff49c212807317940b7ad165b9e0b6532fb40da84fc463c7e8b6340bde1682ec2cc622dee977d1ef5e6a2b384e6aae288d60baaebc6f0572fd99bd1ed8e887382923f4b96cb392f6e239bef51d642ca297a1fd26a56f4464b89fd41beddae96109ff2f732b9275e4247ebe8f30459e0c6c974ae7916700d32c545b0699ca94289023314b9c9b9c895f8146fba9d97a648483097592ba02ccd8c3ea79ade4bd33d5c9756675b3176d5ee6cb4fa68181692a44028551aa35a42024a4fafc69e8df95becc75085cda9b214317042ef79ff244ee11dcab6f2bb3144b0ccf37afb4057870325bcb36a72f58bb3004c4f14a034199ff40edd7a18c55c5bc24df7c99a9a44683264b20c2f64b6928a89fbdf40761180f4fa68235cc10103bffbda33925476eb047403a252e4e9f1b92d960aecbb25283cba0d39a1e735bb385989fc1025bd4468211b9bdbc48276a05a8a1fa94a8f4901d0c6db77e25eed1c6b1dd224d7394d836e56b259e650cf696d81ca9b76fe28d232d7d08fa2293372d64359db8ae6c12c459c7ca8cac1db1a6cce99257732bf2671f5b15847bd641f70ddf92970b10495e1700e0e7c907d4ea7f782989993616e259f80b22e629c266bac92bb7c9ee33bbf1d39e7522a88c236ba7917df1f65b0f87e7086997810b8d4906da073a3924d2bd198eead1e2b96e54ca4a8eb6bd1b761d30cc40d259750151be5ec286fa38cda94ae8a18cea1547c071e7e65fa75ac1cd8635469649d6bea0feb9bb86b5b246e308cd98cee931138ac41574d804a4f79014fc076592cf0238e905efd7d0926739d64111273a259d1e7f0d15a5286494266c3b6f12cd5cab90b3cee9ee7b07108013f1c2f8f7449ba7782041f1714d27fb59330e54a908c4ad6af8c67d92c176aaff5c67545ddb8598026e2b19690acf236f3ac816692c8a9f4411bb7b77e55f2aa251f7ce3adb6f6b3a822a490846fecd6b7599879d13c2c558d92378c8b93284cfdc3f9194a902ac58c5884f04d5c52302a6cad97daf25edffd021912341e79b246057fade7ca556b37b5e9a43aeb78ccfe667bebc6c575301fe10582c23812934ae1b27ad992b82e3277916898f8a77deef08d621e501b1b9417d951c1c531ea8115699ad4e05b640f10e99a8826db60ecbe1e3cbb878b34ec99df51a50602e474444c295a7840372fc5789c721804edb6296e6e35ef509b818b15c284eafc4e96276c83b75fc6994bb3ff1fdbabda2c5e001d334f6f23ed09d67a0a1b88d52107781ad603be2355c36bb29015e624a451ddfb317d374255914ba0f6ffb2c88e12b72ef807ed53c89e8caa01b84f1ccd22077e69ff18d3c8d77f5cf213f2c59e2f9daa67e33fbef7f10391605ebd6af8dba0ec2d8c21d484a0173e451d92f8cfd8f52e88b147c0f7057435d939a5142b0a8ec3e3cd58a84e95a767ed391c5c87db7bf6f93a6dbcf7c8b97566f0e7d7934578434fa0453e4aeaaf1574a45716e165401b1625540b943273373e01ba43a2711b8d7952a870c90483b37ce7b3f8744e99dd49d3a0d32fddd705b00807da0ea88269e47a7094252457351b294dacb278cff80fc2b2f76e19e6858a6ea1c35fa3008b0aeea16fb234041e5b4349dc6706eaefb144881c65455757c55a958a24e27ed147c7274db4b3c0e9bcb6888488b663509e8a4f1e3326eb9d263f41198c4403e404c2c1f890b63d735b73c1505bea5297f2b2b99056ccf69670c492a759cf15e73bf32e156d8358ddbd77c96c60be51e6cae5e5a2fa6652aecff210c9eb7b5a5cc1515a3b0213bc2cb42f2b50394b8672709ac30b50713a37ec5c25f213e173f5c73567c34a8a004501f91934d5563f928edfcb0acba36ea063d1f688414d12d8f509833408964c866c5d7b6c89a7f0c97544a714a77fed28ee68607ff6dac985a30e49d0f311e25ac7e91b9a24f05bfc4377329ec79cb5c0cd14d0ca9ba305321760ddcd8b86f338474fa08b45740d9a60ea49057ec21e9fa7811fa9c8252427aa38d0bc08ff24a9fccc5c79ff692fa72bbf075e7c792c5d5bd5ba763ab224d2868ddaeb9fbe3cae22103b90b0b3b0869c64895a4444b65c4e074eeeae5b0786e662d6a79a2d4701b2f89ab4afd1e9ebebf91683d8d936e9f2a49c6dbd3dba826401273a34460648ad82ba9edba3aa5263aea423da8ebebee5034bf97340c9f071896e8be3d0cd2c4bde22c422b18bdad807f45eb44e1c61a4be64111075436c1fb0b44fabe3e2b4bdf5c9c561377c9b893cca7b397dcc25bf1271a677186ad496ceecf6aa4fe7db610ac5e75a71d0c3c011cb4099ac86484bafc1aedf9d34aa9d88b67d8976b22a64252ab130dbbe1c576c6b7200ffbd323a019342fc600287ed085b120a01769b865b7a94f862026dfa4a0cff99e004d5b104a66b2281d313229b542c83d4af4786a9816dee09ab3395388548048644c61dc3d39b33b03fbb743ed33b8f496312a097e3b5f4994bb8ca6e7f3becf1840c5b4883bf972da230b21247cb3799c2f2a07b282423218e580db31f5a6020e32d88ee9c46e2df88ae1524a734da18021932a654a6e3c6d8bca32b19c458da663df1de867b933798c6ce061c61e20d2bd9d96d2bc4d0625b0d510453afb6fd91b1a6cdbfb540bb933dece478cc8ef6a98054eb62aaf1fe8adb6e59da3d67e487d33887fdd9c8ce6798f827d415cb99f1874264e396041f30c38a68938221f71615fb5aae6bff42b3b425daa073084c85298fb56e1ceaed2978cb951d0291f82a6403e6da706ec2e7a67c431b00117b3acbbecc9ecb5b7d7e168b553a1bc938947d5c57741c10f43bc293730511cef8be8b16bd4f1810414b9fa5be4352fdade90a94c041acda18c0f6f19a2b883b119a81d8b8c18228c6d4cef0ba71c34563f61ec75af163d748f414e6e79ebf189dce063dc47e4cfa936524139e7eec789174502180950202eb4cbf1e79d3b3f1a0db19368b92", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)={[0x36]}, 0x1) 2018/04/21 01:41:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'l\x00'}}, 0x40) 2018/04/21 01:41:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 6: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000005002"]) 2018/04/21 01:41:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'l\x00'}}, 0x40) 2018/04/21 01:41:50 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:50 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000998f70)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) close(r0) 2018/04/21 01:41:51 executing program 6: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:51 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 2018/04/21 01:41:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/21 01:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x80287010, &(0x7f0000000080)) 2018/04/21 01:41:51 executing program 2: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:51 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:51 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="b234d1ddb716b124dd223418acbcd1dea8887973ad625d9ed2b31e6d97c5fb65bec3c17c71963d6bb1a131f1ec18564ba7135284b9fff200f6c91ddb82f43388708802a1c6f6920b15ad6e380b3820fb7f806ce4e3565228f7f3204cab551e82f31b6726fd601278d1dba8357b0e5e5922497a415fe0f6e9d031038444aba6778c6819448d7bf1673025168bd737ff60b70db5d56bff1f1e67d467022c62cac400c3b187e3b8458627e5f6788e6b85bac4acd164630de79d280d465f7886f1a0c8c3012c356d636e2b31d88b8ee6a67f01d9c2d8a9fe2e0d12336ea7d6375bcac4a8f16a179d232216dec8f3657a70ca69da8c8c66168bdf0ef6ec1926fb41add41a7106da5e2e5c60adb03e973afb9a625136f4076f51fd7d835dde482ea2cec3e04b08232fdb7093092118a17885b6e5f2734b3cc09246dc9d22f7acf81b4471740128e22759430b5855a724afeb2503f406df7157cad23b9547385253d9c6c8cbe04d31378d1158772e1bb1c9119855047a7698c3911532f6d34ebbc6b209bed4d0d63c21cddf8bbd48a05c110b5d25bbecb81ddcd5b7033502e91c5e18daa404e4789a363a0ad4bc68c237c389629c3a94370149b40a98b9d7009ebd1ca0075cc1440881e8448cd53e1416feb9aad8de7a8d8ce4394cb5e7f6d6f7aa802adaa615e31a612fec0cb8c17e83a37d39db46a911ae71f158c6d52c6e2e4bb421b861286a2a1d424557ec3d078615d718bd00d03b9e3d430e2ae97c44e0a8710d4549ba641e703031599a5ca132e29665df3caed2428058597fc47e70d3be1f0a3c86e462a0652f8bba54e36c4e1562c7ecd11c6ddf42da2a9cebcb3471a2249d5ad4d1bef5237ca7f470adf4f52432824f423e8eb08fd65fc577e5c6e0ac2fd05b1780ec0cd62f42b663e8bf6711115a1d105989d62f22c3a8a898ca9590997ce5285cb3afafe8ea64716e0d223d59975b11e9c7cfec5e31fef508131855457d7e0360919813c285e640ef520ffc163ee9819d2124fe6ab876905983c0bd754512f12207097e4b6972cb73cd0df60a3738907c80e23a8097c074baede04d677dfd8cce8dcaf4f8183dbc4ebad9b30679ce89c68b7712ba6a529d4bb58e77b69fdbbf2d05a902ab6e4003740b2a862773e6082264634d7e4365c84232d88dac5b0dd0a7c66f66a26e3747b7e4eb438889e4c8134b782b453e82a66d09678fc336e25ed8f6cc0e9f3bd84c2a626e6d3d87ef91c8d92d4721f92b524ef62297f2f6629a4b62be8bff6968e690873f666314c2cf62bdac9f1c0ce0d95b94b8835683cf1e393bb02f722e1cfe50bc7a80b59d70ec07ce0a7a812480abaac061fb0421633b5e1bff5cfeb7a92c10badd2aed9b81f979f9552929f47cb98fab19c106d512ba58da43f2ddf575be31b694cc1a9b01ffaa40e4df354e9f74b5902b26d1af3c1c0916b61c4555532837f1b169b004b891c4d0d77efe90d215bdec77f6540dd690cece0d6057474091b262b447218e7d564cb9eae24f605637d96bb5aab1021afbeb3cc692398afb2646c6d655c787a2b7e2553761be694463b5e6309f6541ea0d333d68bb719d2bbfaef41f3fa78037b29977340f1dc92454910b0be07a82d1aaf5e74a5e787a9487f381d8b9fdd132116d8de316e47e2de75663455f719f9ba7310222dc2ad760c346a9aa1b4a4255eb8c187e8b5a0f1ae733c25f9e1e107242abfdf2872276942d9fa0e4947e5363a2c90eaad5bbc32e8ef3f1670cfa49b202e586cf846ce0586479f7bd2b1c24e56b442e0a65b5859e0e89c6462e4800c35eb25aefcdca9ac00d82d7cd84bd2cc025e4d803154e434b5c3c4f47f6e72f0719225ce39904e5d1c168cce98e353e8f74b1f3cc7719cdd8991473202a8d3480a05e5638354bc22cc904e762bfe2e992967cce774629faffb61426143ed3c5147045ac493079fb26921d8f9a361933cbb199ab502325c43a77753c6bd5de823f64b84279df7e5ecc995fbc913253618bf30e5834c8a1de43d7bacc0f85150aa2d9d8ddf386851cc6e5cb41a7cee85668aef2aa2e681aac7ececdae386d512da12de258271dc6325c454aa12f9c260ea13b1bd84413814dc8e324c237d78ae1eeae05889aaa3f24aabf163358ca21bc1814bf9225eb904cb9b3f9327a13afeb421ea7f45e7c94d184eeca0347fcccb8eccb2dbdd571f14a466acde4d3d2a621671f40e33401ccf7705b161a7935916928801277850d8e819e616c818eef6347f8e84ef4e5a96d8e8b094fa93f3ac58e332ae043356e84eb37e1592f0d336f1e059cad33eabc9b7c2236a8c590c4428b57d9401c2b48c04b11e47e9586ee44efc3997fa60ba76a6555edd929838d635cd98c1ea224c93fd495a604156643356e5d7730d4eb6d539d04899d9021d70cb7c2842f103eb2efc9807ccbfbe10c0fd3639bec5b659f05466c2cc2ecede0ee89df3aa4166844e6eb87ed505582aa1ff7b897226637bd8e15d4bc64fd7c34a9bcf35c3ce89e7f286c0b00235b92c969bc644a17e26e50c2f010005da34dc55604d7ce372580b88caeb9b7b12aa2650c3efa97c81f44f7e78677e60ab27852260ac3312eebb9f0c5fb86644d7d26747e446b0e07e1fcf1ede6e5185829adab1349b33c17585a9a2f0c9d15cf95d8873b89ede585d010ff0944f8bab927b4ca5f3044ea74b04839ffe6d95f86efbc78f449a47a3524b62f2d920d79b16724bb2cd464758d4b1e247442ff6a60f95310c1e3fd37e357d7708b6c9d998d67d5492cc805d945a71a1567535319b0b1cff49c212807317940b7ad165b9e0b6532fb40da84fc463c7e8b6340bde1682ec2cc622dee977d1ef5e6a2b384e6aae288d60baaebc6f0572fd99bd1ed8e887382923f4b96cb392f6e239bef51d642ca297a1fd26a56f4464b89fd41beddae96109ff2f732b9275e4247ebe8f30459e0c6c974ae7916700d32c545b0699ca94289023314b9c9b9c895f8146fba9d97a648483097592ba02ccd8c3ea79ade4bd33d5c9756675b3176d5ee6cb4fa68181692a44028551aa35a42024a4fafc69e8df95becc75085cda9b214317042ef79ff244ee11dcab6f2bb3144b0ccf37afb4057870325bcb36a72f58bb3004c4f14a034199ff40edd7a18c55c5bc24df7c99a9a44683264b20c2f64b6928a89fbdf40761180f4fa68235cc10103bffbda33925476eb047403a252e4e9f1b92d960aecbb25283cba0d39a1e735bb385989fc1025bd4468211b9bdbc48276a05a8a1fa94a8f4901d0c6db77e25eed1c6b1dd224d7394d836e56b259e650cf696d81ca9b76fe28d232d7d08fa2293372d64359db8ae6c12c459c7ca8cac1db1a6cce99257732bf2671f5b15847bd641f70ddf92970b10495e1700e0e7c907d4ea7f782989993616e259f80b22e629c266bac92bb7c9ee33bbf1d39e7522a88c236ba7917df1f65b0f87e7086997810b8d4906da073a3924d2bd198eead1e2b96e54ca4a8eb6bd1b761d30cc40d259750151be5ec286fa38cda94ae8a18cea1547c071e7e65fa75ac1cd8635469649d6bea0feb9bb86b5b246e308cd98cee931138ac41574d804a4f79014fc076592cf0238e905efd7d0926739d64111273a259d1e7f0d15a5286494266c3b6f12cd5cab90b3cee9ee7b07108013f1c2f8f7449ba7782041f1714d27fb59330e54a908c4ad6af8c67d92c176aaff5c67545ddb8598026e2b19690acf236f3ac816692c8a9f4411bb7b77e55f2aa251f7ce3adb6f6b3a822a490846fecd6b7599879d13c2c558d92378c8b93284cfdc3f9194a902ac58c5884f04d5c52302a6cad97daf25edffd021912341e79b246057fade7ca556b37b5e9a43aeb78ccfe667bebc6c575301fe10582c23812934ae1b27ad992b82e3277916898f8a77deef08d621e501b1b9417d951c1c531ea8115699ad4e05b640f10e99a8826db60ecbe1e3cbb878b34ec99df51a50602e474444c295a7840372fc5789c721804edb6296e6e35ef509b818b15c284eafc4e96276c83b75fc6994bb3ff1fdbabda2c5e001d334f6f23ed09d67a0a1b88d52107781ad603be2355c36bb29015e624a451ddfb317d374255914ba0f6ffb2c88e12b72ef807ed53c89e8caa01b84f1ccd22077e69ff18d3c8d77f5cf213f2c59e2f9daa67e33fbef7f10391605ebd6af8dba0ec2d8c21d484a0173e451d92f8cfd8f52e88b147c0f7057435d939a5142b0a8ec3e3cd58a84e95a767ed391c5c87db7bf6f93a6dbcf7c8b97566f0e7d7934578434fa0453e4aeaaf1574a45716e165401b1625540b943273373e01ba43a2711b8d7952a870c90483b37ce7b3f8744e99dd49d3a0d32fddd705b00807da0ea88269e47a7094252457351b294dacb278cff80fc2b2f76e19e6858a6ea1c35fa3008b0aeea16fb234041e5b4349dc6706eaefb144881c65455757c55a958a24e27ed147c7274db4b3c0e9bcb6888488b663509e8a4f1e3326eb9d263f41198c4403e404c2c1f890b63d735b73c1505bea5297f2b2b99056ccf69670c492a759cf15e73bf32e156d8358ddbd77c96c60be51e6cae5e5a2fa6652aecff210c9eb7b5a5cc1515a3b0213bc2cb42f2b50394b8672709ac30b50713a37ec5c25f213e173f5c73567c34a8a004501f91934d5563f928edfcb0acba36ea063d1f688414d12d8f509833408964c866c5d7b6c89a7f0c97544a714a77fed28ee68607ff6dac985a30e49d0f311e25ac7e91b9a24f05bfc4377329ec79cb5c0cd14d0ca9ba305321760ddcd8b86f338474fa08b45740d9a60ea49057ec21e9fa7811fa9c8252427aa38d0bc08ff24a9fccc5c79ff692fa72bbf075e7c792c5d5bd5ba763ab224d2868ddaeb9fbe3cae22103b90b0b3b0869c64895a4444b65c4e074eeeae5b0786e662d6a79a2d4701b2f89ab4afd1e9ebebf91683d8d936e9f2a49c6dbd3dba826401273a34460648ad82ba9edba3aa5263aea423da8ebebee5034bf97340c9f071896e8be3d0cd2c4bde22c422b18bdad807f45eb44e1c61a4be64111075436c1fb0b44fabe3e2b4bdf5c9c561377c9b893cca7b397dcc25bf1271a677186ad496ceecf6aa4fe7db610ac5e75a71d0c3c011cb4099ac86484bafc1aedf9d34aa9d88b67d8976b22a64252ab130dbbe1c576c6b7200ffbd323a019342fc600287ed085b120a01769b865b7a94f862026dfa4a0cff99e004d5b104a66b2281d313229b542c83d4af4786a9816dee09ab3395388548048644c61dc3d39b33b03fbb743ed33b8f496312a097e3b5f4994bb8ca6e7f3becf1840c5b4883bf972da230b21247cb3799c2f2a07b282423218e580db31f5a6020e32d88ee9c46e2df88ae1524a734da18021932a654a6e3c6d8bca32b19c458da663df1de867b933798c6ce061c61e20d2bd9d96d2bc4d0625b0d510453afb6fd91b1a6cdbfb540bb933dece478cc8ef6a98054eb62aaf1fe8adb6e59da3d67e487d33887fdd9c8ce6798f827d415cb99f1874264e396041f30c38a68938221f71615fb5aae6bff42b3b425daa073084c85298fb56e1ceaed2978cb951d0291f82a6403e6da706ec2e7a67c431b00117b3acbbecc9ecb5b7d7e168b553a1bc938947d5c57741c10f43bc293730511cef8be8b16bd4f1810414b9fa5be4352fdade90a94c041acda18c0f6f19a2b883b119a81d8b8c18228c6d4cef0ba71c34563f61ec75af163d748f414e6e79ebf189dce063dc47e4cfa936524139e7eec789174502180950202eb4cbf1e79d3b3f1a0db19368b92", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:51 executing program 6: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000615ff0)={0x3, &(0x7f0000000000)=[{0x81}, {0x9c}, {0x6}]}, 0x10) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2018/04/21 01:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x80287010, &(0x7f0000000080)) 2018/04/21 01:41:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/21 01:41:51 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000000)) 2018/04/21 01:41:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/21 01:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x80287010, &(0x7f0000000080)) 2018/04/21 01:41:51 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000000)) 2018/04/21 01:41:52 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/21 01:41:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x80287010, &(0x7f0000000080)) 2018/04/21 01:41:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000000)) 2018/04/21 01:41:52 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:52 executing program 2: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:52 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/04/21 01:41:52 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 2018/04/21 01:41:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000000)) 2018/04/21 01:41:52 executing program 4: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:53 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:53 executing program 4: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:53 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:41:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r0, r1, 0x0) 2018/04/21 01:41:53 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 2018/04/21 01:41:53 executing program 2: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:53 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:41:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:53 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009040)=[{{&(0x7f0000001580)=@nfc={0x27}, 0x80, &(0x7f0000002740)}}, {{&(0x7f0000002900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[{0x10, 0x1, 0xfeef}], 0x10}}], 0x2, 0x0) 2018/04/21 01:41:53 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009040)=[{{&(0x7f0000001580)=@nfc={0x27}, 0x80, &(0x7f0000002740)}}, {{&(0x7f0000002900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[{0x10, 0x1, 0xfeef}], 0x10}}], 0x2, 0x0) 2018/04/21 01:41:53 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:41:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000b80)=0xffffffffefffffdb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/21 01:41:54 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 2018/04/21 01:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) 2018/04/21 01:41:54 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:41:54 executing program 4: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:54 executing program 2: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/100, 0x64}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 01:41:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r0, r1, 0x0) 2018/04/21 01:41:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009040)=[{{&(0x7f0000001580)=@nfc={0x27}, 0x80, &(0x7f0000002740)}}, {{&(0x7f0000002900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[{0x10, 0x1, 0xfeef}], 0x10}}], 0x2, 0x0) 2018/04/21 01:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:54 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x401) 2018/04/21 01:41:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009040)=[{{&(0x7f0000001580)=@nfc={0x27}, 0x80, &(0x7f0000002740)}}, {{&(0x7f0000002900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[{0x10, 0x1, 0xfeef}], 0x10}}], 0x2, 0x0) 2018/04/21 01:41:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) 2018/04/21 01:41:54 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x401) 2018/04/21 01:41:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) 2018/04/21 01:41:54 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f00008d0ff8)) 2018/04/21 01:41:54 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x401) 2018/04/21 01:41:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) 2018/04/21 01:41:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) 2018/04/21 01:41:55 executing program 0: mmap(&(0x7f0000f1a000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000af3000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000fbf000)=0xcbb, 0x7, 0x0) pipe(&(0x7f0000000040)) 2018/04/21 01:41:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/253, 0xfd}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000400000200000000000000000000"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000800)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:55 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x401) 2018/04/21 01:41:55 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f00008d0ff8)) 2018/04/21 01:41:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r0, r1, 0x0) 2018/04/21 01:41:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000001f7de7df40febce5000000000034fb8fb9e4bf48b6ad26c597084f5c1900000000130000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000000000000000000000000c090a020c", 0x7d}], 0x0, &(0x7f0000018900)={'nouuid,'}) 2018/04/21 01:41:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) 2018/04/21 01:41:55 executing program 0: mmap(&(0x7f0000f1a000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000af3000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000fbf000)=0xcbb, 0x7, 0x0) pipe(&(0x7f0000000040)) 2018/04/21 01:41:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) 2018/04/21 01:41:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xc0, 0x110}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3e0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) [ 89.167372] XFS (loop2): Filesystem has a realtime volume, use rtdev=device option [ 89.175596] XFS (loop2): RT mount failed 2018/04/21 01:41:55 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f00008d0ff8)) 2018/04/21 01:41:55 executing program 0: mmap(&(0x7f0000f1a000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000af3000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000fbf000)=0xcbb, 0x7, 0x0) pipe(&(0x7f0000000040)) 2018/04/21 01:41:55 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) [ 89.317790] XFS (loop2): Filesystem has a realtime volume, use rtdev=device option [ 89.325772] XFS (loop2): RT mount failed 2018/04/21 01:41:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r0, r1, 0x0) 2018/04/21 01:41:56 executing program 0: mmap(&(0x7f0000f1a000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000af3000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000fbf000)=0xcbb, 0x7, 0x0) pipe(&(0x7f0000000040)) 2018/04/21 01:41:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000001f7de7df40febce5000000000034fb8fb9e4bf48b6ad26c597084f5c1900000000130000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000000000000000000000000c090a020c", 0x7d}], 0x0, &(0x7f0000018900)={'nouuid,'}) 2018/04/21 01:41:56 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) 2018/04/21 01:41:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) 2018/04/21 01:41:56 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f00008d0ff8)) 2018/04/21 01:41:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/253, 0xfd}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000400000200000000000000000000"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000800)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:56 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) 2018/04/21 01:41:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) 2018/04/21 01:41:56 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) [ 90.364883] XFS (loop2): Filesystem has a realtime volume, use rtdev=device option [ 90.372827] XFS (loop2): RT mount failed 2018/04/21 01:41:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) 2018/04/21 01:41:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000001f7de7df40febce5000000000034fb8fb9e4bf48b6ad26c597084f5c1900000000130000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000000000000000000000000c090a020c", 0x7d}], 0x0, &(0x7f0000018900)={'nouuid,'}) 2018/04/21 01:41:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) [ 90.568511] XFS (loop2): Filesystem has a realtime volume, use rtdev=device option [ 90.576457] XFS (loop2): RT mount failed 2018/04/21 01:41:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) 2018/04/21 01:41:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) 2018/04/21 01:41:57 executing program 2: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000001f7de7df40febce5000000000034fb8fb9e4bf48b6ad26c597084f5c1900000000130000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000000000000000000000000c090a020c", 0x7d}], 0x0, &(0x7f0000018900)={'nouuid,'}) 2018/04/21 01:41:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/253, 0xfd}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000400000200000000000000000000"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000800)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2}}, 0x0, 0x1, 0x0, 0x0, 0x30}, 0x98) 2018/04/21 01:41:57 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) 2018/04/21 01:41:57 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/21 01:41:57 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) 2018/04/21 01:41:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2}}, 0x0, 0x1, 0x0, 0x0, 0x30}, 0x98) [ 91.588796] XFS (loop2): Filesystem has a realtime volume, use rtdev=device option [ 91.596741] XFS (loop2): RT mount failed 2018/04/21 01:41:58 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/21 01:41:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2}}, 0x0, 0x1, 0x0, 0x0, 0x30}, 0x98) 2018/04/21 01:41:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd630104"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:41:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2}}, 0x0, 0x1, 0x0, 0x0, 0x30}, 0x98) 2018/04/21 01:41:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd630104"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:41:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd630104"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:41:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd630104"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:41:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/253, 0xfd}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000400000200000000000000000000"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000800)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:59 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) 2018/04/21 01:41:59 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) 2018/04/21 01:41:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/21 01:41:59 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/21 01:41:59 executing program 2: syz_mount_image$gfs2(&(0x7f0000003880)='gfs2\x00', &(0x7f00000038c0)='./file1\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005b80)={[{@rgrplvb='rgrplvb', 0x2c}]}) 2018/04/21 01:41:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x362b, &(0x7f0000000000)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) 2018/04/21 01:41:59 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:41:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={{}, 0x0, 0x2}) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) [ 92.799924] gfs2: not a GFS2 filesystem [ 92.835326] gfs2: not a GFS2 filesystem 2018/04/21 01:41:59 executing program 2: syz_mount_image$gfs2(&(0x7f0000003880)='gfs2\x00', &(0x7f00000038c0)='./file1\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005b80)={[{@rgrplvb='rgrplvb', 0x2c}]}) 2018/04/21 01:41:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={{}, 0x0, 0x2}) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) [ 92.952277] gfs2: not a GFS2 filesystem 2018/04/21 01:41:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={{}, 0x0, 0x2}) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/04/21 01:42:00 executing program 2: syz_mount_image$gfs2(&(0x7f0000003880)='gfs2\x00', &(0x7f00000038c0)='./file1\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005b80)={[{@rgrplvb='rgrplvb', 0x2c}]}) 2018/04/21 01:42:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={{}, 0x0, 0x2}) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/04/21 01:42:00 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:42:00 executing program 4: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:42:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x6e, &(0x7f0000001100), 0x0, &(0x7f00009dffb8)}, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000140), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) close(r1) 2018/04/21 01:42:00 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:00 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/21 01:42:00 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) [ 93.698522] gfs2: not a GFS2 filesystem 2018/04/21 01:42:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x952) 2018/04/21 01:42:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x6e, &(0x7f0000001100), 0x0, &(0x7f00009dffb8)}, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000140), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) close(r1) 2018/04/21 01:42:00 executing program 2: syz_mount_image$gfs2(&(0x7f0000003880)='gfs2\x00', &(0x7f00000038c0)='./file1\x00', 0x0, 0x0, &(0x7f0000005b00), 0x0, &(0x7f0000005b80)={[{@rgrplvb='rgrplvb', 0x2c}]}) 2018/04/21 01:42:00 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x952) [ 93.910861] gfs2: not a GFS2 filesystem 2018/04/21 01:42:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x6e, &(0x7f0000001100), 0x0, &(0x7f00009dffb8)}, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000140), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) close(r1) 2018/04/21 01:42:00 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:00 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x952) 2018/04/21 01:42:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x6e, &(0x7f0000001100), 0x0, &(0x7f00009dffb8)}, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000140), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) close(r1) 2018/04/21 01:42:01 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:01 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:01 executing program 4: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:42:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x952) 2018/04/21 01:42:01 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:42:01 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:01 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="6636f30f7fc90f017900640f22d366b8a46500000f23d80f21f86635400000c00f23f8660f57e2baf80c66b869863b8f66efbafc0cec0f20d86635080000000f22d8660f3a0f171f66b9e102000066b811d1519866ba000000000f30ba4200ed", 0x60}], 0x1, 0x0, &(0x7f0000000340), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="660f73f00c6766c74424000b0000006766c74424020a0000006766c744240600000000670f011c24ba2100b0edeeba200066b80000000066eff20f38f13a0f08b871000f00d06466660f5c32c16a090c0f188b7166", 0x55}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:42:01 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) recvmsg(r1, &(0x7f00001b0000)={&(0x7f00003a4fa0)=@nfc_llcp, 0x80, &(0x7f0000045000)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/21 01:42:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:01 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:01 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:01 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:01 executing program 4: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:42:01 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000400)=@llc={0x1a}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001900)}, 0x0) 2018/04/21 01:42:01 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="6636f30f7fc90f017900640f22d366b8a46500000f23d80f21f86635400000c00f23f8660f57e2baf80c66b869863b8f66efbafc0cec0f20d86635080000000f22d8660f3a0f171f66b9e102000066b811d1519866ba000000000f30ba4200ed", 0x60}], 0x1, 0x0, &(0x7f0000000340), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="660f73f00c6766c74424000b0000006766c74424020a0000006766c744240600000000670f011c24ba2100b0edeeba200066b80000000066eff20f38f13a0f08b871000f00d06466660f5c32c16a090c0f188b7166", 0x55}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:42:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:01 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) recvmsg(r1, &(0x7f00001b0000)={&(0x7f00003a4fa0)=@nfc_llcp, 0x80, &(0x7f0000045000)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/21 01:42:01 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 2018/04/21 01:42:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) recvmsg(r1, &(0x7f00001b0000)={&(0x7f00003a4fa0)=@nfc_llcp, 0x80, &(0x7f0000045000)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/21 01:42:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:01 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:01 executing program 6: clock_nanosleep(0x10002, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 2018/04/21 01:42:02 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="6636f30f7fc90f017900640f22d366b8a46500000f23d80f21f86635400000c00f23f8660f57e2baf80c66b869863b8f66efbafc0cec0f20d86635080000000f22d8660f3a0f171f66b9e102000066b811d1519866ba000000000f30ba4200ed", 0x60}], 0x1, 0x0, &(0x7f0000000340), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="660f73f00c6766c74424000b0000006766c74424020a0000006766c744240600000000670f011c24ba2100b0edeeba200066b80000000066eff20f38f13a0f08b871000f00d06466660f5c32c16a090c0f188b7166", 0x55}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:42:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) recvmsg(r1, &(0x7f00001b0000)={&(0x7f00003a4fa0)=@nfc_llcp, 0x80, &(0x7f0000045000)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/21 01:42:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/21 01:42:02 executing program 6: clock_nanosleep(0x10002, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 2018/04/21 01:42:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:02 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) fcntl$setstatus(r0, 0x4, 0x40000) 2018/04/21 01:42:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/21 01:42:02 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="6636f30f7fc90f017900640f22d366b8a46500000f23d80f21f86635400000c00f23f8660f57e2baf80c66b869863b8f66efbafc0cec0f20d86635080000000f22d8660f3a0f171f66b9e102000066b811d1519866ba000000000f30ba4200ed", 0x60}], 0x1, 0x0, &(0x7f0000000340), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="660f73f00c6766c74424000b0000006766c74424020a0000006766c744240600000000670f011c24ba2100b0edeeba200066b80000000066eff20f38f13a0f08b871000f00d06466660f5c32c16a090c0f188b7166", 0x55}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:42:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/21 01:42:02 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) 2018/04/21 01:42:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0x1c) 2018/04/21 01:42:02 executing program 6: clock_nanosleep(0x10002, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 2018/04/21 01:42:02 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) fcntl$setstatus(r0, 0x4, 0x40000) 2018/04/21 01:42:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/45, 0x2d}, 0x0) 2018/04/21 01:42:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) [ 96.216254] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 96.223944] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 96.231475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.238296] IPv6: NLM_F_CREATE should be set when creating new route [ 96.244898] IPv6: NLM_F_CREATE should be set when creating new route 2018/04/21 01:42:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x20000000000005, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/21 01:42:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/21 01:42:02 executing program 3: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000180)) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffc7f) 2018/04/21 01:42:02 executing program 6: clock_nanosleep(0x10002, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 2018/04/21 01:42:02 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) fcntl$setstatus(r0, 0x4, 0x40000) 2018/04/21 01:42:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) [ 96.444411] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 96.452130] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 96.459610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 2018/04/21 01:42:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x20000000000005, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/21 01:42:03 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x2c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/21 01:42:03 executing program 6: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x2) 2018/04/21 01:42:03 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) fcntl$setstatus(r0, 0x4, 0x40000) 2018/04/21 01:42:03 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) 2018/04/21 01:42:03 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) 2018/04/21 01:42:03 executing program 3: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000180)) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffc7f) [ 97.408321] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 97.415889] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 97.423380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.436733] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 97.444247] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 97.451733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 2018/04/21 01:42:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x20000000000005, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/21 01:42:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:03 executing program 1: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000080)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 2018/04/21 01:42:03 executing program 6: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x2) [ 97.458272] IPv6: NLM_F_CREATE should be set when creating new route [ 97.464868] IPv6: NLM_F_CREATE should be set when creating new route 2018/04/21 01:42:03 executing program 3: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000180)) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffc7f) 2018/04/21 01:42:03 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) 2018/04/21 01:42:04 executing program 6: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x2) 2018/04/21 01:42:04 executing program 1: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000080)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 2018/04/21 01:42:04 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x20000000000005, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) [ 97.622711] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 97.630358] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 97.637897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 2018/04/21 01:42:04 executing program 6: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x2) 2018/04/21 01:42:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) 2018/04/21 01:42:04 executing program 1: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000080)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 2018/04/21 01:42:04 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) [ 97.782006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.839345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 2018/04/21 01:42:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:04 executing program 3: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000180)) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffc7f) 2018/04/21 01:42:04 executing program 6: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) 2018/04/21 01:42:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xe4, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1=0xe0000001, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}}}, @migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xe4}, 0x1}, 0x0) 2018/04/21 01:42:05 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x64, 0x18, 0x801, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x7, 0xfe, 0x7, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @RTA_EXPIRES={0x8, 0x10, 0x2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_EXPIRES={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0xa) unshare(0x4000000) unshare(0x48200000) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x28}, 0x8) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@int=0x7, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x80000001}, 0x8) 2018/04/21 01:42:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xe4, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1=0xe0000001, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}}}, @migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xe4}, 0x1}, 0x0) 2018/04/21 01:42:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xc568, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000480)=""/50, 0x32}, &(0x7f00000004c0)}, 0x20) 2018/04/21 01:42:05 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/21 01:42:05 executing program 1: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000080)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 2018/04/21 01:42:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:05 executing program 6: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) 2018/04/21 01:42:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xe4, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1=0xe0000001, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}}}, @migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xe4}, 0x1}, 0x0) 2018/04/21 01:42:05 executing program 6: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) [ 99.147050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 2018/04/21 01:42:05 executing program 1: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) 2018/04/21 01:42:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xc568, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000480)=""/50, 0x32}, &(0x7f00000004c0)}, 0x20) 2018/04/21 01:42:05 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/21 01:42:05 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/21 01:42:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xe4, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1=0xe0000001, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}}}, @migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xe4}, 0x1}, 0x0) 2018/04/21 01:42:05 executing program 6: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) 2018/04/21 01:42:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1) close(r0) 2018/04/21 01:42:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xc568, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000480)=""/50, 0x32}, &(0x7f00000004c0)}, 0x20) 2018/04/21 01:42:06 executing program 1: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) 2018/04/21 01:42:06 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/21 01:42:06 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/21 01:42:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/21 01:42:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xc568, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000480)=""/50, 0x32}, &(0x7f00000004c0)}, 0x20) 2018/04/21 01:42:06 executing program 1: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=@raw={"0f00", 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, &(0x7f0000024000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xfffffffffffffe2e}, @unspec=@CT0={0x876a31fef6a79ceb, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0x2e9}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfda0) 2018/04/21 01:42:06 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/21 01:42:06 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) [ 100.115132] FAT-fs (loop6): Directory bread(block 112) failed [ 100.132325] FAT-fs (loop6): Directory bread(block 113) failed 2018/04/21 01:42:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 100.182188] FAT-fs (loop6): Directory bread(block 114) failed 2018/04/21 01:42:06 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffd}, 0xfffffffffffffdf6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) gettid() 2018/04/21 01:42:06 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="78f2ff00", @ANYBLOB="000828bd7000fedbdf250c0000003c00020008000b000a000000080008000101000008000b000a00000008000800000800000800040001010000080003000600000008000800d1720000080005000010000020000200080009000000000014000100ac1414aa000000000000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x206000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r2}) 2018/04/21 01:42:06 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x6000)=nil, 0x6000, 0x0, 0x11, r0, 0x0) msync(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4) 2018/04/21 01:42:06 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x82, &(0x7f0000000040)=""/4, &(0x7f0000000ffc)=0x4) [ 100.253087] FAT-fs (loop6): Directory bread(block 112) failed [ 100.343440] FAT-fs (loop6): Directory bread(block 113) failed [ 100.384425] FAT-fs (loop6): Directory bread(block 114) failed [ 100.404612] FAT-fs (loop6): Directory bread(block 112) failed [ 100.422783] FAT-fs (loop6): Directory bread(block 113) failed [ 100.428889] FAT-fs (loop6): Directory bread(block 114) failed [ 100.506490] attempt to access beyond end of device [ 100.512284] loop6: rw=1, want=120, limit=112 2018/04/21 01:42:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:07 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x6000)=nil, 0x6000, 0x0, 0x11, r0, 0x0) msync(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4) 2018/04/21 01:42:07 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffd}, 0xfffffffffffffdf6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) gettid() 2018/04/21 01:42:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/21 01:42:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="78f2ff00", @ANYBLOB="000828bd7000fedbdf250c0000003c00020008000b000a000000080008000101000008000b000a00000008000800000800000800040001010000080003000600000008000800d1720000080005000010000020000200080009000000000014000100ac1414aa000000000000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x206000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r2}) 2018/04/21 01:42:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) 2018/04/21 01:42:07 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x82, &(0x7f0000000040)=""/4, &(0x7f0000000ffc)=0x4) 2018/04/21 01:42:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:07 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffd}, 0xfffffffffffffdf6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) gettid() 2018/04/21 01:42:07 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x82, &(0x7f0000000040)=""/4, &(0x7f0000000ffc)=0x4) 2018/04/21 01:42:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/21 01:42:07 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x6000)=nil, 0x6000, 0x0, 0x11, r0, 0x0) msync(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4) [ 100.990811] FAT-fs (loop6): Directory bread(block 112) failed 2018/04/21 01:42:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="78f2ff00", @ANYBLOB="000828bd7000fedbdf250c0000003c00020008000b000a000000080008000101000008000b000a00000008000800000800000800040001010000080003000600000008000800d1720000080005000010000020000200080009000000000014000100ac1414aa000000000000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x206000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r2}) [ 101.033576] FAT-fs (loop5): Directory bread(block 112) failed [ 101.050083] FAT-fs (loop6): Directory bread(block 113) failed 2018/04/21 01:42:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) 2018/04/21 01:42:07 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x82, &(0x7f0000000040)=""/4, &(0x7f0000000ffc)=0x4) 2018/04/21 01:42:07 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffd}, 0xfffffffffffffdf6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) gettid() [ 101.074921] FAT-fs (loop5): Directory bread(block 113) failed [ 101.081556] FAT-fs (loop6): Directory bread(block 114) failed [ 101.097135] FAT-fs (loop5): Directory bread(block 114) failed [ 101.185606] FAT-fs (loop5): Directory bread(block 112) failed [ 101.221237] FAT-fs (loop6): Directory bread(block 112) failed [ 101.233605] FAT-fs (loop5): Directory bread(block 113) failed [ 101.246184] FAT-fs (loop5): Directory bread(block 114) failed [ 101.260133] FAT-fs (loop6): Directory bread(block 113) failed [ 101.278221] FAT-fs (loop5): Directory bread(block 112) failed 2018/04/21 01:42:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:07 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x6000)=nil, 0x6000, 0x0, 0x11, r0, 0x0) msync(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4) 2018/04/21 01:42:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) 2018/04/21 01:42:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="78f2ff00", @ANYBLOB="000828bd7000fedbdf250c0000003c00020008000b000a000000080008000101000008000b000a00000008000800000800000800040001010000080003000600000008000800d1720000080005000010000020000200080009000000000014000100ac1414aa000000000000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x206000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r2}) 2018/04/21 01:42:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) 2018/04/21 01:42:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) [ 101.284367] FAT-fs (loop6): Directory bread(block 114) failed [ 101.290439] FAT-fs (loop5): Directory bread(block 113) failed [ 101.301758] FAT-fs (loop6): Directory bread(block 112) failed [ 101.309905] FAT-fs (loop5): Directory bread(block 114) failed [ 101.318150] FAT-fs (loop6): Directory bread(block 113) failed [ 101.324433] FAT-fs (loop6): Directory bread(block 114) failed [ 101.365185] attempt to access beyond end of device [ 101.370240] loop5: rw=1, want=120, limit=112 [ 101.380273] attempt to access beyond end of device [ 101.385416] loop6: rw=1, want=120, limit=112 [ 101.435867] FAT-fs (loop7): Directory bread(block 112) failed [ 101.472251] FAT-fs (loop7): Directory bread(block 113) failed [ 101.478636] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/21 01:42:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) 2018/04/21 01:42:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/139, 0x8b) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000003fd0)=[{&(0x7f0000006f07)=""/249, 0xf9}], 0x1) ioctl$int_in(r1, 0x80000000005000, &(0x7f0000003ff8)) [ 101.509980] FAT-fs (loop0): Directory bread(block 113) failed [ 101.510855] FAT-fs (loop7): Directory bread(block 114) failed [ 101.546898] FAT-fs (loop0): Directory bread(block 114) failed 2018/04/21 01:42:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) [ 101.581196] FAT-fs (loop5): Directory bread(block 112) failed [ 101.639221] FAT-fs (loop5): Directory bread(block 113) failed [ 101.659106] FAT-fs (loop6): Directory bread(block 112) failed [ 101.676814] FAT-fs (loop5): Directory bread(block 114) failed [ 101.684611] FAT-fs (loop7): Directory bread(block 112) failed [ 101.695742] FAT-fs (loop0): Directory bread(block 112) failed [ 101.701855] FAT-fs (loop6): Directory bread(block 113) failed [ 101.702532] FAT-fs (loop7): Directory bread(block 113) failed [ 101.720649] FAT-fs (loop0): Directory bread(block 113) failed [ 101.732732] FAT-fs (loop7): Directory bread(block 114) failed 2018/04/21 01:42:08 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x40) [ 101.739090] FAT-fs (loop6): Directory bread(block 114) failed [ 101.747779] FAT-fs (loop0): Directory bread(block 114) failed [ 101.769587] FAT-fs (loop7): Directory bread(block 112) failed [ 101.782494] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/21 01:42:08 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) [ 101.789969] FAT-fs (loop5): Directory bread(block 112) failed [ 101.800371] FAT-fs (loop7): Directory bread(block 113) failed [ 101.804358] FAT-fs (loop6): Directory bread(block 112) failed [ 101.812878] FAT-fs (loop5): Directory bread(block 113) failed [ 101.815665] FAT-fs (loop7): Directory bread(block 114) failed [ 101.818989] FAT-fs (loop0): Directory bread(block 113) failed 2018/04/21 01:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) [ 101.836680] FAT-fs (loop6): Directory bread(block 113) failed [ 101.851599] FAT-fs (loop5): Directory bread(block 114) failed [ 101.861297] FAT-fs (loop6): Directory bread(block 114) failed [ 101.873164] FAT-fs (loop0): Directory bread(block 114) failed [ 101.883983] FAT-fs (loop6): Directory bread(block 112) failed 2018/04/21 01:42:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) [ 101.894450] FAT-fs (loop5): Directory bread(block 112) failed [ 101.912017] FAT-fs (loop6): Directory bread(block 113) failed [ 101.923643] FAT-fs (loop5): Directory bread(block 113) failed [ 101.936365] FAT-fs (loop6): Directory bread(block 114) failed [ 101.946647] FAT-fs (loop5): Directory bread(block 114) failed [ 102.003889] attempt to access beyond end of device [ 102.008972] loop0: rw=1, want=120, limit=112 [ 102.035065] attempt to access beyond end of device [ 102.040153] loop7: rw=1, want=120, limit=112 [ 102.053818] attempt to access beyond end of device [ 102.058909] loop6: rw=1, want=120, limit=112 [ 102.071427] attempt to access beyond end of device [ 102.076484] loop5: rw=1, want=120, limit=112 2018/04/21 01:42:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/139, 0x8b) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000003fd0)=[{&(0x7f0000006f07)=""/249, 0xf9}], 0x1) ioctl$int_in(r1, 0x80000000005000, &(0x7f0000003ff8)) 2018/04/21 01:42:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:09 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/21 01:42:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) [ 102.792195] FAT-fs (loop7): Directory bread(block 112) failed [ 102.823152] FAT-fs (loop7): Directory bread(block 113) failed [ 102.832215] FAT-fs (loop7): Directory bread(block 114) failed 2018/04/21 01:42:09 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/21 01:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) [ 102.843730] FAT-fs (loop6): Directory bread(block 112) failed [ 102.855354] FAT-fs (loop5): Directory bread(block 112) failed [ 102.868783] FAT-fs (loop5): Directory bread(block 113) failed [ 102.877313] FAT-fs (loop6): Directory bread(block 113) failed [ 102.893511] FAT-fs (loop6): Directory bread(block 114) failed [ 102.904149] FAT-fs (loop0): Directory bread(block 112) failed [ 102.918854] FAT-fs (loop5): Directory bread(block 114) failed [ 102.924569] FAT-fs (loop7): Directory bread(block 112) failed 2018/04/21 01:42:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) [ 102.939709] FAT-fs (loop0): Directory bread(block 113) failed [ 102.958849] FAT-fs (loop7): Directory bread(block 113) failed [ 102.965126] FAT-fs (loop7): Directory bread(block 114) failed [ 102.993249] FAT-fs (loop7): Directory bread(block 112) failed [ 102.997406] FAT-fs (loop0): Directory bread(block 114) failed [ 103.015900] FAT-fs (loop5): Directory bread(block 112) failed [ 103.023483] FAT-fs (loop6): Directory bread(block 112) failed [ 103.030376] FAT-fs (loop5): Directory bread(block 113) failed [ 103.036502] FAT-fs (loop7): Directory bread(block 113) failed 2018/04/21 01:42:09 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) [ 103.046879] FAT-fs (loop7): Directory bread(block 114) failed [ 103.054150] FAT-fs (loop5): Directory bread(block 114) failed [ 103.079120] FAT-fs (loop6): Directory bread(block 113) failed 2018/04/21 01:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) [ 103.094222] FAT-fs (loop6): Directory bread(block 114) failed 2018/04/21 01:42:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) [ 103.117814] FAT-fs (loop6): Directory bread(block 112) failed [ 103.126487] FAT-fs (loop0): Directory bread(block 112) failed [ 103.132878] FAT-fs (loop5): Directory bread(block 112) failed [ 103.149407] FAT-fs (loop0): Directory bread(block 113) failed [ 103.149693] FAT-fs (loop6): Directory bread(block 113) failed [ 103.168255] FAT-fs (loop5): Directory bread(block 113) failed [ 103.170190] attempt to access beyond end of device [ 103.179415] loop7: rw=1, want=120, limit=112 [ 103.179941] FAT-fs (loop0): Directory bread(block 114) failed [ 103.196840] FAT-fs (loop5): Directory bread(block 114) failed 2018/04/21 01:42:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) [ 103.213861] FAT-fs (loop0): Directory bread(block 112) failed [ 103.226260] FAT-fs (loop6): Directory bread(block 114) failed [ 103.255848] FAT-fs (loop0): Directory bread(block 113) failed [ 103.295317] FAT-fs (loop0): Directory bread(block 114) failed [ 103.342379] FAT-fs (loop7): Directory bread(block 112) failed [ 103.356116] attempt to access beyond end of device [ 103.361169] loop6: rw=1, want=120, limit=112 [ 103.386848] attempt to access beyond end of device [ 103.391931] loop5: rw=1, want=120, limit=112 [ 103.398659] FAT-fs (loop7): Directory bread(block 113) failed [ 103.416844] FAT-fs (loop7): Directory bread(block 114) failed [ 103.465364] attempt to access beyond end of device [ 103.470306] FAT-fs (loop7): Directory bread(block 112) failed [ 103.470528] loop0: rw=1, want=120, limit=112 [ 103.494526] FAT-fs (loop7): Directory bread(block 113) failed [ 103.500909] FAT-fs (loop7): Directory bread(block 114) failed [ 103.507948] FAT-fs (loop7): Directory bread(block 112) failed [ 103.513942] FAT-fs (loop7): Directory bread(block 113) failed [ 103.519904] FAT-fs (loop7): Directory bread(block 114) failed [ 103.551333] attempt to access beyond end of device [ 103.556422] loop7: rw=1, want=120, limit=112 2018/04/21 01:42:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fff6, 0x0) fallocate(r0, 0x0, 0x0, 0x1) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/111) 2018/04/21 01:42:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/21 01:42:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/139, 0x8b) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000003fd0)=[{&(0x7f0000006f07)=""/249, 0xf9}], 0x1) ioctl$int_in(r1, 0x80000000005000, &(0x7f0000003ff8)) 2018/04/21 01:42:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/21 01:42:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) pwritev(r0, &(0x7f00000014c0), 0x0, 0x0) 2018/04/21 01:42:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/21 01:42:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) pwritev(r0, &(0x7f00000014c0), 0x0, 0x0) [ 103.838606] FAT-fs (loop0): Directory bread(block 112) failed [ 103.878454] FAT-fs (loop0): Directory bread(block 113) failed [ 103.909116] FAT-fs (loop0): Directory bread(block 114) failed [ 104.003342] FAT-fs (loop0): Directory bread(block 112) failed [ 104.012612] FAT-fs (loop0): Directory bread(block 113) failed [ 104.018715] FAT-fs (loop0): Directory bread(block 114) failed [ 104.025892] FAT-fs (loop0): Directory bread(block 112) failed [ 104.031883] FAT-fs (loop0): Directory bread(block 113) failed [ 104.037906] FAT-fs (loop0): Directory bread(block 114) failed [ 104.065796] attempt to access beyond end of device [ 104.070819] loop0: rw=1, want=120, limit=112 2018/04/21 01:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/21 01:42:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/21 01:42:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 2018/04/21 01:42:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) pwritev(r0, &(0x7f00000014c0), 0x0, 0x0) 2018/04/21 01:42:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000565000)=[{&(0x7f00005c1fbc)='q', 0x1}], 0x1}, 0x2000c000) shutdown(r1, 0x1) 2018/04/21 01:42:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/139, 0x8b) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000003fd0)=[{&(0x7f0000006f07)=""/249, 0xf9}], 0x1) ioctl$int_in(r1, 0x80000000005000, &(0x7f0000003ff8)) 2018/04/21 01:42:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/21 01:42:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) pwritev(r0, &(0x7f00000014c0), 0x0, 0x0) 2018/04/21 01:42:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2d, 0x35]}, 0x2) 2018/04/21 01:42:11 executing program 2: syz_emit_ethernet(0x9e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x0) 2018/04/21 01:42:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/21 01:42:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xfffffffffffffffa}, 0x8) 2018/04/21 01:42:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2d, 0x35]}, 0x2) 2018/04/21 01:42:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x1d}, 0xf1, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f9f8a0dbd4cc20"}, 0x10}, 0x1}, 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/21 01:42:11 executing program 2: syz_emit_ethernet(0x9e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x0) 2018/04/21 01:42:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2d, 0x35]}, 0x2) 2018/04/21 01:42:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000565000)=[{&(0x7f00005c1fbc)='q', 0x1}], 0x1}, 0x2000c000) shutdown(r1, 0x1) 2018/04/21 01:42:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xfffffffffffffffa}, 0x8) 2018/04/21 01:42:11 executing program 2: syz_emit_ethernet(0x9e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x0) 2018/04/21 01:42:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2d, 0x35]}, 0x2) 2018/04/21 01:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79}) 2018/04/21 01:42:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/21 01:42:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00002a0e50)={0x14, 0x29, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:12 executing program 2: syz_emit_ethernet(0x9e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x0) 2018/04/21 01:42:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xfffffffffffffffa}, 0x8) 2018/04/21 01:42:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000565000)=[{&(0x7f00005c1fbc)='q', 0x1}], 0x1}, 0x2000c000) shutdown(r1, 0x1) 2018/04/21 01:42:12 executing program 1: syz_emit_ethernet(0x4e, &(0x7f000000c000)={@random="2114defa76f6", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x3, 0x102b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) 2018/04/21 01:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79}) 2018/04/21 01:42:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x6b, 0x0]}, 0x2c}]}}) 2018/04/21 01:42:12 executing program 1: syz_emit_ethernet(0x4e, &(0x7f000000c000)={@random="2114defa76f6", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x3, 0x102b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) 2018/04/21 01:42:12 executing program 2: mq_open(&(0x7f0000000200)='^\x00', 0x40, 0x0, &(0x7f0000000240)={0x0, 0x100000000, 0x3ff}) 2018/04/21 01:42:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00002a0e50)={0x14, 0x29, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xfffffffffffffffa}, 0x8) 2018/04/21 01:42:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x6b, 0x0]}, 0x2c}]}}) 2018/04/21 01:42:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) sendmsg(r1, &(0x7f0000ff1000)={0x0, 0x0, &(0x7f0000565000)=[{&(0x7f00005c1fbc)='q', 0x1}], 0x1}, 0x2000c000) shutdown(r1, 0x1) 2018/04/21 01:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79}) 2018/04/21 01:42:13 executing program 1: syz_emit_ethernet(0x4e, &(0x7f000000c000)={@random="2114defa76f6", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x3, 0x102b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) 2018/04/21 01:42:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/21 01:42:13 executing program 2: mq_open(&(0x7f0000000200)='^\x00', 0x40, 0x0, &(0x7f0000000240)={0x0, 0x100000000, 0x3ff}) 2018/04/21 01:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x44) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) dup3(r2, r1, 0x0) 2018/04/21 01:42:13 executing program 1: syz_emit_ethernet(0x4e, &(0x7f000000c000)={@random="2114defa76f6", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x3, 0x102b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) 2018/04/21 01:42:13 executing program 2: mq_open(&(0x7f0000000200)='^\x00', 0x40, 0x0, &(0x7f0000000240)={0x0, 0x100000000, 0x3ff}) 2018/04/21 01:42:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x6b, 0x0]}, 0x2c}]}}) 2018/04/21 01:42:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00002a0e50)={0x14, 0x29, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x44) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) dup3(r2, r1, 0x0) 2018/04/21 01:42:13 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000080)={@random="ef481d814099", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x88a8}}}, &(0x7f00000002c0)) 2018/04/21 01:42:13 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79}) 2018/04/21 01:42:14 executing program 2: mq_open(&(0x7f0000000200)='^\x00', 0x40, 0x0, &(0x7f0000000240)={0x0, 0x100000000, 0x3ff}) 2018/04/21 01:42:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x6b, 0x0]}, 0x2c}]}}) 2018/04/21 01:42:14 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000080)={@random="ef481d814099", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x88a8}}}, &(0x7f00000002c0)) 2018/04/21 01:42:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00002a0e50)={0x14, 0x29, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:14 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:14 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000080)={@random="ef481d814099", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x88a8}}}, &(0x7f00000002c0)) 2018/04/21 01:42:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x44) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) dup3(r2, r1, 0x0) 2018/04/21 01:42:14 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)=ANY=[@ANYRES32=0x0, @ANYBLOB='oHW'], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002ff0)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x8, 0x4}) 2018/04/21 01:42:14 executing program 3: syz_read_part_table(0x1903000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000007c0)="0000000000000000000000000017000000000000000000008068200900000000020083000800010000000700000000000900630010000800000008000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x60, 0x1a0}]) 2018/04/21 01:42:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000031f000)="220000004a000700ea091008090007000a0000000022000004000300040001008c45", 0x22) 2018/04/21 01:42:14 executing program 7: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) [ 107.932713] loop3: p1 p2 2018/04/21 01:42:14 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000080)={@random="ef481d814099", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x88a8}}}, &(0x7f00000002c0)) 2018/04/21 01:42:14 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)=ANY=[@ANYRES32=0x0, @ANYBLOB='oHW'], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002ff0)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x8, 0x4}) 2018/04/21 01:42:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000031f000)="220000004a000700ea091008090007000a0000000022000004000300040001008c45", 0x22) [ 108.025272] device lo entered promiscuous mode [ 108.086059] loop3: p1 p2 [ 108.110296] device lo left promiscuous mode 2018/04/21 01:42:14 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0x247, &(0x7f0000000100)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 108.135400] device lo entered promiscuous mode 2018/04/21 01:42:14 executing program 3: syz_read_part_table(0x1903000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000007c0)="0000000000000000000000000017000000000000000000008068200900000000020083000800010000000700000000000900630010000800000008000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x60, 0x1a0}]) 2018/04/21 01:42:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000031f000)="220000004a000700ea091008090007000a0000000022000004000300040001008c45", 0x22) 2018/04/21 01:42:14 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:14 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)=ANY=[@ANYRES32=0x0, @ANYBLOB='oHW'], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002ff0)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x8, 0x4}) [ 108.289914] loop3: p1 p2 2018/04/21 01:42:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x44) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) dup3(r2, r1, 0x0) 2018/04/21 01:42:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)=ANY=[@ANYRES32=0x0, @ANYBLOB='oHW'], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002ff0)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x8, 0x4}) 2018/04/21 01:42:14 executing program 3: syz_read_part_table(0x1903000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000007c0)="0000000000000000000000000017000000000000000000008068200900000000020083000800010000000700000000000900630010000800000008000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x60, 0x1a0}]) 2018/04/21 01:42:14 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000080)="240000005e000302072188d7fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d1", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsf0\x00', 0x1002}) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/193, 0xc1}, 0x0) 2018/04/21 01:42:14 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:14 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0x247, &(0x7f0000000100)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/21 01:42:14 executing program 7: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000031f000)="220000004a000700ea091008090007000a0000000022000004000300040001008c45", 0x22) [ 108.545416] loop3: p1 p2 [ 108.564111] device lo left promiscuous mode [ 108.581275] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 2018/04/21 01:42:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0x247, &(0x7f0000000100)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/21 01:42:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) [ 108.603324] print_req_error: I/O error, dev loop3, sector 1 [ 108.612008] device lo entered promiscuous mode [ 108.630938] print_req_error: I/O error, dev loop3, sector 1 [ 108.637456] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 108.661083] device lo entered promiscuous mode [ 108.663053] print_req_error: I/O error, dev loop3, sector 2 [ 108.671558] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 108.679567] print_req_error: I/O error, dev loop3, sector 3 [ 108.685427] Buffer I/O error on dev loop3p1, logical block 2, async page read [ 108.693198] print_req_error: I/O error, dev loop3, sector 4 [ 108.699009] Buffer I/O error on dev loop3p1, logical block 3, async page read 2018/04/21 01:42:15 executing program 3: syz_read_part_table(0x1903000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000007c0)="0000000000000000000000000017000000000000000000008068200900000000020083000800010000000700000000000900630010000800000008000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x60, 0x1a0}]) [ 108.707302] print_req_error: I/O error, dev loop3, sector 5 [ 108.713154] Buffer I/O error on dev loop3p1, logical block 4, async page read [ 108.720829] print_req_error: I/O error, dev loop3, sector 6 [ 108.726655] Buffer I/O error on dev loop3p1, logical block 5, async page read [ 108.734075] print_req_error: I/O error, dev loop3, sector 7 [ 108.739849] Buffer I/O error on dev loop3p1, logical block 6, async page read [ 108.755604] print_req_error: I/O error, dev loop3, sector 1 2018/04/21 01:42:15 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:42:15 executing program 7: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) [ 108.761449] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 108.769451] print_req_error: I/O error, dev loop3, sector 2 [ 108.775339] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 108.794309] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 108.809929] device lo entered promiscuous mode 2018/04/21 01:42:15 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) [ 108.854180] device lo entered promiscuous mode 2018/04/21 01:42:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0x247, &(0x7f0000000100)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 108.884583] device lo left promiscuous mode [ 108.915931] device lo entered promiscuous mode [ 108.979215] device lo left promiscuous mode [ 109.018173] device lo entered promiscuous mode 2018/04/21 01:42:16 executing program 7: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000040)=@set_option={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), 0xffffffff, 0x0, 0x1, 0x4}}, 0x20) 2018/04/21 01:42:16 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:42:16 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:16 executing program 3: prctl$getreaper(0x23, &(0x7f0000000400)) 2018/04/21 01:42:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:16 executing program 0: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:16 executing program 3: prctl$getreaper(0x23, &(0x7f0000000400)) [ 109.918762] device lo left promiscuous mode [ 109.932527] device lo left promiscuous mode [ 109.958077] device lo left promiscuous mode 2018/04/21 01:42:16 executing program 3: prctl$getreaper(0x23, &(0x7f0000000400)) [ 109.977354] device lo left promiscuous mode [ 109.986563] device lo entered promiscuous mode [ 110.004609] device lo entered promiscuous mode 2018/04/21 01:42:16 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="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", 0xfc1}], 0x2) 2018/04/21 01:42:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) [ 110.026698] device lo entered promiscuous mode [ 110.033731] device lo entered promiscuous mode 2018/04/21 01:42:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bcsh0\x00', 0x0, 0x0, 0xff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000680)='net/hci\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f7570ae63707500c87e707a2d0edb66d7e990521c96050a2a439db78b74dbc3227d9eddc4bd81391650975e148ea53e2ac4a7c7cb1d597c020796353bc1ffe8536407812e53db9023c6", 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000001c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r2, &(0x7f0000ad9000), 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718"}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) socket$inet_sctp(0x2, 0x5, 0x84) 2018/04/21 01:42:16 executing program 3: prctl$getreaper(0x23, &(0x7f0000000400)) [ 110.156057] hfs: can't find a HFS filesystem on dev loop1 [ 110.162702] device lo left promiscuous mode [ 110.205569] device lo left promiscuous mode [ 110.222633] hfs: can't find a HFS filesystem on dev loop1 [ 110.224005] device lo entered promiscuous mode [ 110.241206] device lo entered promiscuous mode 2018/04/21 01:42:17 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:42:17 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 7: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="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", 0xfc1}], 0x2) 2018/04/21 01:42:17 executing program 0: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:17 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) [ 110.905314] hfs: can't find a HFS filesystem on dev loop1 2018/04/21 01:42:17 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="a2a8e14ea49f6fbaa8603eb7126eacbb162a5833d1a7d13fa86d87025d41bce12a93f17d041b6a24d25ff83a3d544b21a5890bff790f861dd0ebea5ac861b9aa3f4a692136edf08d46c3a3c36da78532180a4a79eea54db1b4fb54d681ea417582de25633d2ab66b669ff7b2c9928918622b34f8ef7390944dd51f11c88f7910256e4964ca8301b0019087c960cea6896612f2174e7ff9fdf039f11567e2f835678c5a6322660a219f27a59f217ff35f86723995b2dc48141b5418715e0ed0b1ae8ec2e04b932ec7efec9c0917c2c96aceba254d6be21532b797ae43c2740a14322ac0eccc7d33e9c70246b8fb005bc33cfd59cda686edef770056553fd25a3ba3ee6d084786a80aea9f4d3581d452e1729c97fee8c1a0a31d0088237eb1f213eac783962ba382173efb2b6a31423421f3e62e818d6ce9b771d143d497f956dd183914dd854569e92d3804cf5f7bb38d4843ee3cec557224eee39ab25c5d0b0894f8a32d00091ddfe8c5f35c61fad73c9a939f991c7321bdc4d3bfd7313a448cb20c19ff0784a9e065fc238c7d74d8f408126bc6a26b70d1c92b53501292792e83e2d31dde4200fead34f858b8eb6bba53ef6759608969a454dea0a70128b6ca42f1ccc01e7c5f4177ca431097fb9cbfd6d5266e9e459ca871c0143cc3d0e430ad408aa750133acdb10f0c32c28f366fa7a6314d9c3e2b69c58fecd89d86be3db77bae91ee8f48a0a6f232b572d101eb12e4e924c9c5f3b51e9df81a6ce5ce9f41d2b0243b7fef6fe562e395277aada775319f1699d3c778cb669888aa88efd026c3708429e59387ee5ac4bbe03f529c0cad54df8bb699d5b4035dcdf45c1d5635299293db5c101a852d9bad2008182133ec2b75d5d249c54d6fc8519d1ddc01d08b11a4b58698f41dbd0efc2b7d5be915be0b920f8ea179cc5056eced371f183e7134a1b392f9b7956defc0f798c59239cd5cc1c22cf4b4fa010b7a42f960ee987853a48416f5cf444b90693a8a4018f577e9bb33ae10ad1796db0b9f110bc22e1f3af0f29ff69d39f98a750b6a594a43a058d9264a102b06a3257415bac49dfb020a53b4a660ca916a2e0d5790e544b0f011606e37a464f4be6390c34383b079d5c535b7f78ce2a1bba610dd354f9c5a661f1b0750b2a60793a6a609328ee0d1351d6c93ccbd8f7a121f9389064c2bcd7f91170a17d50a8745af038e3b7af58b79b59b6534c183740138dea2463e8ff3cc287b547b002e1b0d501a5e121c03e9b683561858e987c178d9fa94d13fd0e8ff0c9f119f3e0ac66191a6f6815a7422299b91d77977ceb2d01fb568a1c5675b2dae20f726b7e79b301f4b1d02a0598adcfb5dcbe00bdc7aed5d6d751a36fb8138126f18a6d4b9a30322c2a37e17f3250f77f13fdd8f76a93a225980780614d499e6dc5c6371c0c88c499c088499dc2d16bd371c2748be60fffbdd608175178d625b6adc1d4bb4a9311230350d5b28367cb02fddce781b2e37cefb8c60025a85a043647a539ffea3b6f76ae0c266fddde50d702f421d63b614c6683540a136860283baaabf36821e67eabc19474403a77b1180a653b77bfdbafa22d590278cda749e7f6058e9e0216d1ca5c370e67f62a3f163fa44ebe590fea377940cb9923488cd1c2ae0d0b5ee5900848383a1669358833684a4262d648a1c72e5481e672176082748714e2bd10f9d131285f7fa91eec0897d07413c1436dd3f543624d346b551d02f14a6584c433ffb8b511c078692ddc7f6b09af277b2004d3fff672cb130a1877fe1565bc6002710919f904586093b9a6f551a062db84d4134cd16d2aa89d8806310db42bf6b793ed7c16f0e90e007e081d2ed90ff3a9a4dba762651a01f38e4ddee7c8fb20a436e0d97233179bf91360471f1d8f82d2b03d4390ca99d35bf34ba406d2306db88db23fade9d38915638600a8ac7ed4d74414dff8cf5f3b8dc80b74ab7ac39614abe655940a1629faa5676ed3b8b9bc77efada130d41e682bff8b3acebf37937a5aca922ed8bc852f461e8e8704ac70eec898ad0af6fe6256f8e4e59aeae72148eaaad5f3da9e0d7126e5b09f4c32d0aed405a5015eac7ba6915057e355c4a64513c5271390e8ac90c6a28199b67d1253ed3ccca2204069331ee6734ba60530858f6cf9a738a564cc27800f6b0082ce5b68fb15607ec72342932c0263cb6364d046b44d526a0afa5e6a3606fed56301dd8ee580ebcf046a2502086568b919322fd3dcbd1694b60171078c16d6425cad463c3e613acf8ca609ced997531ba6541ca34876d1639c05a6ddb5b03fece2202b9e95d98126b0094fb3356acbf33f8007daa4fa828c271a4e8ba4e3066e6e4075cd61f68b3c541a60424aa16ecde4193315ebc4010eb27f4f2ee3bd110a10740a0dbed4b58748e4c0c9f201e6a8fb1b1ca06d1cfd356ebf7a516e205d4ac686d36633ad4ec171d7e5773c745ea153149afb1b040d0788eb91d6359f163c65beddce5480c036d9658e5374bf8ce89c0d1a9c1576e31b65d8ac9b6928d621feb707a3d3eed0195015f730ae94e228117caf9c815a95199da32bda73a026251ec148d58a169a96d56017516b706c839996f18634074154282246a46d020480343936f3c3c33fe1b7c019e905917c92b26f2e5f4637758320105fa0b43b47c5f72b383ff019e40c0c398dad0ec3745be399c4190aacca6a34b08747d05433cbe6d924d382076f9c8e1aa88c5a8cbbf18f027766a6e42992d85d2dc08959befe40c6d960698c9e9ad21e628ad2ea9f5177d901cc3d5cbe99105e5846daaaae558dc26f318065dc4c70fc8785d609ab20e0db32b9bbc7a754eb7c7d4cd6102d085ddaf448ac5be82b6fa4db1d11044e4ddfe009a85083598ccc08ab9ce1fbb429697ad5b349106de17dbcc19180f413bd533791b289d7c97e26d14cdcf14de124f8c050a53192a9419534348c3256f5facb53e50dfcada773336636b9e30536d995fd843e52e62791cd5b412d17b8b819c0b9c8a3fd7b0be54673f799f87091ff511dc81974b6b64cb662b38bb31806ab2ac761ec7d5283fef65aa3c3b3fd98e76db128a999f66bced459c28fbd491d4d0e06ad019098ac259e0f22249330df08aed53eb5d7e1b3a648d21c0767dc7565526d7a11e74af02a9088ec184b12c7717193679795be836e9250118da1a69dede585ad043c12e1f366bf782c78dc68096166a8a4a047040b7f4bbec7ee44de112180e0e00cbd5aaa9abed3beda220e6ec1e9edb87d161a92618cd2adaec8a4af44862b42d03655cca0f81e3fc1de4eda4426adc56fd8a93b560c4879415fef343993cb6bb93e9a322d271a7a1b48936ba99912499ecce480d8b1b9ab796ffdd2e6b08999b546019d6a79f6aa45fdeab6c0d86dac82dd945bfb4db4963eda98b36c00aa597409c043ffe24d272bd93d157c73acfc0307e9596f1dbc1f441081328e6f475ca0eb4a83f11b0e2f91b1d94186450a70d4c07a53f5b7f827b60fc38177cd2484ed5d74d3b69882c032bfa26c808aad7a3bcb46fc642e35eaebbf6eab1b45ac72445018b82f2997e1d1d57274b71a692f1b9bbf700e0f3bd2b924ddf71be8cd4f88d9d9dc589d1c4821ad332ed7fae14a6c9b583cb90d39b6a969837637c3a61b152bbf3af0b9c3ad484d2e2271a3c7bba8ac82d6b9387de4496d0f3fa576d0699d173d84b7d3592e897e583d0f2ddc67c7916a09d6f8442b8e6986734bb33172cce849a089845e9ba72d99575dcc73d2ba13377f4a3c0b77ae69bb3dfe528af7744c4bbb3d381ab5d4100f9173bca5dbec2d5b5588346e8f8e21d408695171a9a9ba8b1ccf95c79f148afa1720029daa42d87d07ef323815e859db9a0b4ee907fbd0a5c0d7ed41e098580f24af3fe6993ba39a2b467a2435e8395add33f2771accbfca4d5707f1e9e874a6dc6c33ef4668a02eed11e1a9552aef22708b641bf9b7c7b15d8f2023df03882d8ccc5a9e95313c7012be64a47414a702859c520cd8955cc5f8c5952574c960db05199f6b3bc9a89a518b02477553d62b13b81eb7f3de9a9fe9863164e6c0a17660965e1b80a0a112acd0769b4763678f89cdf01de915223c04b8aab71e5d9cc8585d397bbe98e78abb2d6c21fd644bdcdddd890f44090fefe877686bcd55fd33ff549c27eac01d8791c775b16c05c35439254f285f1a865f887c92ae89c8218d7da18b9b00668e3b63de8941410f025dd0c7b99c42e04465e781e5ec8e13c300ac7278eb7bd5803ca11e9c7380cb210b6b2549895aa30bf78a0d8391401f255ed740d0fe8a22a619295b1327360a69b7253ba3909031a334200810113b170430a8c595e4f0ca321bb7057757e9eed7099559e0df8be2a61036bb3134e723b703931039cc48a3dc593a16fb800134381bf64ac611af8be260b97b22e4194ac65ae22e113dc39f8e0aadf8c2041e0b9e988249639da45a7a8d7b49ecbecce496966774af4a8a847d6ef501f2615077d113001bf34480da48128b74f1097a4a926e4e819534b7e09bd6a910f55ca53a652ce97634f5c4f20da24f6510943aea5df0636701b6eff074802680c0be3ce35e94d930d30e67f8b02ec4e83d24e87e9859abad3b8c466627c3b0138d6d8af7cef0fefefd606fb8213b69e9294257a0cac28f27db157577fe517fce7c032f61e32dc838b27a9834adc2d8bf22a23bb0f480d727d94dd378bebb23623035f984e2ae3bf7ae9dd0c16002f3945767e031ee0ba8d5308a1b2f8cd156a0df671d108e844795875489086e29a03218e57885db04782a2a1c7a5fbadf72ab14781f087d46d6564a0af59b50db89de2ca10796392b54ece7f8dee0da9d3befee50d363f72c32b98187dfe75a66248a37772ac152d62caf872f1e397499ad8dbc666d4075a6166d3989034280756cda75ec1d56a0c5c33781c5a66614aa72b6006807a269e7be6374eadc023c8948d137df1bc9bba6e202ac91a75f837b4c211a3a89244b762724ac8f955656003b188f5ac3783bce558b26e8308d4fb302ef9a95481af503e7ce402a3ffbc776de027cf5db40ff50cf43d3b2e1167001a1620063b14e1ed54880c41c3e17de963d194ece49cc958f10a4e31a63510e11118007d833114d5930f26e9b2d171716eeea421f86327f55d5288401772f118774c3595eefd23d00302bbaca4e2d83dad792bc5f8f2339160c6c3b3ac537a707d10126068feeafde7545bc63eb84f111487d14c5849a778a3c6c75ca2bbc30848d201a38bb52dd4910f2b136bb009a3e14c071d5b1339b57c4279b0d28915d2e6e3ede83f7bbff331f26d5362020e38fe46f64cd4cae38d15c6dadff7f4961219b3b329856fcdccbc2e5573d7bef720ee03d3a84751b9299f7cc696460213cff113065248528a515349a80ebea3e2f8f281383c57fa61b686ae975302ab48bfe07aec0a9e929d5c891a2523bbba14534f9de86e8e24997ba72841d0a8255eb9ea9ca76c9b618cd848e0e1542d2849c77fa4ac26f78fdd3cc710c17d4032b7896d55afd61716960378e87a32c3624e1fa46a765951fd453042809799e32fce8a73d17c8b5e471c1751dbb0a0c0c353a9a9c287906487dea58b3a5cfd793785657c227e431e6031ebf1fc3c10ec289d5e0b6961582be965755734b0f3b8675d00cd9394890ee2e8a71ae1e328098796ce6fc8ad", 0xfc1}], 0x2) 2018/04/21 01:42:17 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:17 executing program 5: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:17 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) [ 111.095950] hfs: can't find a HFS filesystem on dev loop1 2018/04/21 01:42:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:42:18 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) sync_file_range(r0, 0x0, 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r3, 0xd, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000000)={r7, r6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x10000002005, 0x0) socket$unix(0x1, 0x0, 0x0) 2018/04/21 01:42:18 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="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", 0xfc1}], 0x2) 2018/04/21 01:42:18 executing program 2: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:18 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="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", 0xfc1}], 0x2) 2018/04/21 01:42:18 executing program 7: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:18 executing program 0: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:18 executing program 5: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) [ 112.106446] hfs: can't find a HFS filesystem on dev loop3 [ 112.112547] hfs: can't find a HFS filesystem on dev loop1 2018/04/21 01:42:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x26, 0x109, 0x0, 0x0, {0x44000002}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:18 executing program 1: syz_emit_ethernet(0x1c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="f27e31c5ea1b", [], {@generic={0x6558, "4d098b2c52d8d522651359fe71ba"}}}, &(0x7f00000000c0)={0x0, 0x3, [0x2, 0xdf3, 0x0, 0x29c]}) 2018/04/21 01:42:18 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="a2a8e14ea49f6fbaa8603eb7126eacbb162a5833d1a7d13fa86d87025d41bce12a93f17d041b6a24d25ff83a3d544b21a5890bff790f861dd0ebea5ac861b9aa3f4a692136edf08d46c3a3c36da78532180a4a79eea54db1b4fb54d681ea417582de25633d2ab66b669ff7b2c9928918622b34f8ef7390944dd51f11c88f7910256e4964ca8301b0019087c960cea6896612f2174e7ff9fdf039f11567e2f835678c5a6322660a219f27a59f217ff35f86723995b2dc48141b5418715e0ed0b1ae8ec2e04b932ec7efec9c0917c2c96aceba254d6be21532b797ae43c2740a14322ac0eccc7d33e9c70246b8fb005bc33cfd59cda686edef770056553fd25a3ba3ee6d084786a80aea9f4d3581d452e1729c97fee8c1a0a31d0088237eb1f213eac783962ba382173efb2b6a31423421f3e62e818d6ce9b771d143d497f956dd183914dd854569e92d3804cf5f7bb38d4843ee3cec557224eee39ab25c5d0b0894f8a32d00091ddfe8c5f35c61fad73c9a939f991c7321bdc4d3bfd7313a448cb20c19ff0784a9e065fc238c7d74d8f408126bc6a26b70d1c92b53501292792e83e2d31dde4200fead34f858b8eb6bba53ef6759608969a454dea0a70128b6ca42f1ccc01e7c5f4177ca431097fb9cbfd6d5266e9e459ca871c0143cc3d0e430ad408aa750133acdb10f0c32c28f366fa7a6314d9c3e2b69c58fecd89d86be3db77bae91ee8f48a0a6f232b572d101eb12e4e924c9c5f3b51e9df81a6ce5ce9f41d2b0243b7fef6fe562e395277aada775319f1699d3c778cb669888aa88efd026c3708429e59387ee5ac4bbe03f529c0cad54df8bb699d5b4035dcdf45c1d5635299293db5c101a852d9bad2008182133ec2b75d5d249c54d6fc8519d1ddc01d08b11a4b58698f41dbd0efc2b7d5be915be0b920f8ea179cc5056eced371f183e7134a1b392f9b7956defc0f798c59239cd5cc1c22cf4b4fa010b7a42f960ee987853a48416f5cf444b90693a8a4018f577e9bb33ae10ad1796db0b9f110bc22e1f3af0f29ff69d39f98a750b6a594a43a058d9264a102b06a3257415bac49dfb020a53b4a660ca916a2e0d5790e544b0f011606e37a464f4be6390c34383b079d5c535b7f78ce2a1bba610dd354f9c5a661f1b0750b2a60793a6a609328ee0d1351d6c93ccbd8f7a121f9389064c2bcd7f91170a17d50a8745af038e3b7af58b79b59b6534c183740138dea2463e8ff3cc287b547b002e1b0d501a5e121c03e9b683561858e987c178d9fa94d13fd0e8ff0c9f119f3e0ac66191a6f6815a7422299b91d77977ceb2d01fb568a1c5675b2dae20f726b7e79b301f4b1d02a0598adcfb5dcbe00bdc7aed5d6d751a36fb8138126f18a6d4b9a30322c2a37e17f3250f77f13fdd8f76a93a225980780614d499e6dc5c6371c0c88c499c088499dc2d16bd371c2748be60fffbdd608175178d625b6adc1d4bb4a9311230350d5b28367cb02fddce781b2e37cefb8c60025a85a043647a539ffea3b6f76ae0c266fddde50d702f421d63b614c6683540a136860283baaabf36821e67eabc19474403a77b1180a653b77bfdbafa22d590278cda749e7f6058e9e0216d1ca5c370e67f62a3f163fa44ebe590fea377940cb9923488cd1c2ae0d0b5ee5900848383a1669358833684a4262d648a1c72e5481e672176082748714e2bd10f9d131285f7fa91eec0897d07413c1436dd3f543624d346b551d02f14a6584c433ffb8b511c078692ddc7f6b09af277b2004d3fff672cb130a1877fe1565bc6002710919f904586093b9a6f551a062db84d4134cd16d2aa89d8806310db42bf6b793ed7c16f0e90e007e081d2ed90ff3a9a4dba762651a01f38e4ddee7c8fb20a436e0d97233179bf91360471f1d8f82d2b03d4390ca99d35bf34ba406d2306db88db23fade9d38915638600a8ac7ed4d74414dff8cf5f3b8dc80b74ab7ac39614abe655940a1629faa5676ed3b8b9bc77efada130d41e682bff8b3acebf37937a5aca922ed8bc852f461e8e8704ac70eec898ad0af6fe6256f8e4e59aeae72148eaaad5f3da9e0d7126e5b09f4c32d0aed405a5015eac7ba6915057e355c4a64513c5271390e8ac90c6a28199b67d1253ed3ccca2204069331ee6734ba60530858f6cf9a738a564cc27800f6b0082ce5b68fb15607ec72342932c0263cb6364d046b44d526a0afa5e6a3606fed56301dd8ee580ebcf046a2502086568b919322fd3dcbd1694b60171078c16d6425cad463c3e613acf8ca609ced997531ba6541ca34876d1639c05a6ddb5b03fece2202b9e95d98126b0094fb3356acbf33f8007daa4fa828c271a4e8ba4e3066e6e4075cd61f68b3c541a60424aa16ecde4193315ebc4010eb27f4f2ee3bd110a10740a0dbed4b58748e4c0c9f201e6a8fb1b1ca06d1cfd356ebf7a516e205d4ac686d36633ad4ec171d7e5773c745ea153149afb1b040d0788eb91d6359f163c65beddce5480c036d9658e5374bf8ce89c0d1a9c1576e31b65d8ac9b6928d621feb707a3d3eed0195015f730ae94e228117caf9c815a95199da32bda73a026251ec148d58a169a96d56017516b706c839996f18634074154282246a46d020480343936f3c3c33fe1b7c019e905917c92b26f2e5f4637758320105fa0b43b47c5f72b383ff019e40c0c398dad0ec3745be399c4190aacca6a34b08747d05433cbe6d924d382076f9c8e1aa88c5a8cbbf18f027766a6e42992d85d2dc08959befe40c6d960698c9e9ad21e628ad2ea9f5177d901cc3d5cbe99105e5846daaaae558dc26f318065dc4c70fc8785d609ab20e0db32b9bbc7a754eb7c7d4cd6102d085ddaf448ac5be82b6fa4db1d11044e4ddfe009a85083598ccc08ab9ce1fbb429697ad5b349106de17dbcc19180f413bd533791b289d7c97e26d14cdcf14de124f8c050a53192a9419534348c3256f5facb53e50dfcada773336636b9e30536d995fd843e52e62791cd5b412d17b8b819c0b9c8a3fd7b0be54673f799f87091ff511dc81974b6b64cb662b38bb31806ab2ac761ec7d5283fef65aa3c3b3fd98e76db128a999f66bced459c28fbd491d4d0e06ad019098ac259e0f22249330df08aed53eb5d7e1b3a648d21c0767dc7565526d7a11e74af02a9088ec184b12c7717193679795be836e9250118da1a69dede585ad043c12e1f366bf782c78dc68096166a8a4a047040b7f4bbec7ee44de112180e0e00cbd5aaa9abed3beda220e6ec1e9edb87d161a92618cd2adaec8a4af44862b42d03655cca0f81e3fc1de4eda4426adc56fd8a93b560c4879415fef343993cb6bb93e9a322d271a7a1b48936ba99912499ecce480d8b1b9ab796ffdd2e6b08999b546019d6a79f6aa45fdeab6c0d86dac82dd945bfb4db4963eda98b36c00aa597409c043ffe24d272bd93d157c73acfc0307e9596f1dbc1f441081328e6f475ca0eb4a83f11b0e2f91b1d94186450a70d4c07a53f5b7f827b60fc38177cd2484ed5d74d3b69882c032bfa26c808aad7a3bcb46fc642e35eaebbf6eab1b45ac72445018b82f2997e1d1d57274b71a692f1b9bbf700e0f3bd2b924ddf71be8cd4f88d9d9dc589d1c4821ad332ed7fae14a6c9b583cb90d39b6a969837637c3a61b152bbf3af0b9c3ad484d2e2271a3c7bba8ac82d6b9387de4496d0f3fa576d0699d173d84b7d3592e897e583d0f2ddc67c7916a09d6f8442b8e6986734bb33172cce849a089845e9ba72d99575dcc73d2ba13377f4a3c0b77ae69bb3dfe528af7744c4bbb3d381ab5d4100f9173bca5dbec2d5b5588346e8f8e21d408695171a9a9ba8b1ccf95c79f148afa1720029daa42d87d07ef323815e859db9a0b4ee907fbd0a5c0d7ed41e098580f24af3fe6993ba39a2b467a2435e8395add33f2771accbfca4d5707f1e9e874a6dc6c33ef4668a02eed11e1a9552aef22708b641bf9b7c7b15d8f2023df03882d8ccc5a9e95313c7012be64a47414a702859c520cd8955cc5f8c5952574c960db05199f6b3bc9a89a518b02477553d62b13b81eb7f3de9a9fe9863164e6c0a17660965e1b80a0a112acd0769b4763678f89cdf01de915223c04b8aab71e5d9cc8585d397bbe98e78abb2d6c21fd644bdcdddd890f44090fefe877686bcd55fd33ff549c27eac01d8791c775b16c05c35439254f285f1a865f887c92ae89c8218d7da18b9b00668e3b63de8941410f025dd0c7b99c42e04465e781e5ec8e13c300ac7278eb7bd5803ca11e9c7380cb210b6b2549895aa30bf78a0d8391401f255ed740d0fe8a22a619295b1327360a69b7253ba3909031a334200810113b170430a8c595e4f0ca321bb7057757e9eed7099559e0df8be2a61036bb3134e723b703931039cc48a3dc593a16fb800134381bf64ac611af8be260b97b22e4194ac65ae22e113dc39f8e0aadf8c2041e0b9e988249639da45a7a8d7b49ecbecce496966774af4a8a847d6ef501f2615077d113001bf34480da48128b74f1097a4a926e4e819534b7e09bd6a910f55ca53a652ce97634f5c4f20da24f6510943aea5df0636701b6eff074802680c0be3ce35e94d930d30e67f8b02ec4e83d24e87e9859abad3b8c466627c3b0138d6d8af7cef0fefefd606fb8213b69e9294257a0cac28f27db157577fe517fce7c032f61e32dc838b27a9834adc2d8bf22a23bb0f480d727d94dd378bebb23623035f984e2ae3bf7ae9dd0c16002f3945767e031ee0ba8d5308a1b2f8cd156a0df671d108e844795875489086e29a03218e57885db04782a2a1c7a5fbadf72ab14781f087d46d6564a0af59b50db89de2ca10796392b54ece7f8dee0da9d3befee50d363f72c32b98187dfe75a66248a37772ac152d62caf872f1e397499ad8dbc666d4075a6166d3989034280756cda75ec1d56a0c5c33781c5a66614aa72b6006807a269e7be6374eadc023c8948d137df1bc9bba6e202ac91a75f837b4c211a3a89244b762724ac8f955656003b188f5ac3783bce558b26e8308d4fb302ef9a95481af503e7ce402a3ffbc776de027cf5db40ff50cf43d3b2e1167001a1620063b14e1ed54880c41c3e17de963d194ece49cc958f10a4e31a63510e11118007d833114d5930f26e9b2d171716eeea421f86327f55d5288401772f118774c3595eefd23d00302bbaca4e2d83dad792bc5f8f2339160c6c3b3ac537a707d10126068feeafde7545bc63eb84f111487d14c5849a778a3c6c75ca2bbc30848d201a38bb52dd4910f2b136bb009a3e14c071d5b1339b57c4279b0d28915d2e6e3ede83f7bbff331f26d5362020e38fe46f64cd4cae38d15c6dadff7f4961219b3b329856fcdccbc2e5573d7bef720ee03d3a84751b9299f7cc696460213cff113065248528a515349a80ebea3e2f8f281383c57fa61b686ae975302ab48bfe07aec0a9e929d5c891a2523bbba14534f9de86e8e24997ba72841d0a8255eb9ea9ca76c9b618cd848e0e1542d2849c77fa4ac26f78fdd3cc710c17d4032b7896d55afd61716960378e87a32c3624e1fa46a765951fd453042809799e32fce8a73d17c8b5e471c1751dbb0a0c0c353a9a9c287906487dea58b3a5cfd793785657c227e431e6031ebf1fc3c10ec289d5e0b6961582be965755734b0f3b8675d00cd9394890ee2e8a71ae1e328098796ce6fc8ad", 0xfc1}], 0x2) 2018/04/21 01:42:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x26, 0x109, 0x0, 0x0, {0x44000002}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:18 executing program 1: syz_emit_ethernet(0x1c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="f27e31c5ea1b", [], {@generic={0x6558, "4d098b2c52d8d522651359fe71ba"}}}, &(0x7f00000000c0)={0x0, 0x3, [0x2, 0xdf3, 0x0, 0x29c]}) [ 112.311114] hfs: can't find a HFS filesystem on dev loop3 2018/04/21 01:42:18 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[]) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000002040)="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", 0xfc1}], 0x2) 2018/04/21 01:42:18 executing program 1: syz_emit_ethernet(0x1c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="f27e31c5ea1b", [], {@generic={0x6558, "4d098b2c52d8d522651359fe71ba"}}}, &(0x7f00000000c0)={0x0, 0x3, [0x2, 0xdf3, 0x0, 0x29c]}) 2018/04/21 01:42:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x26, 0x109, 0x0, 0x0, {0x44000002}}, 0x14}, 0x1}, 0x0) [ 112.444336] hfs: can't find a HFS filesystem on dev loop3 2018/04/21 01:42:19 executing program 5: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:19 executing program 1: syz_emit_ethernet(0x1c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="f27e31c5ea1b", [], {@generic={0x6558, "4d098b2c52d8d522651359fe71ba"}}}, &(0x7f00000000c0)={0x0, 0x3, [0x2, 0xdf3, 0x0, 0x29c]}) 2018/04/21 01:42:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x26, 0x109, 0x0, 0x0, {0x44000002}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:42:19 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000857ff8), 0x8) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x2, 0x22812, r0, 0x2000000000000000) 2018/04/21 01:42:19 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0x0, 0xf0d]}) 2018/04/21 01:42:19 executing program 7: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:19 executing program 2: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:19 executing program 0: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000f61ffc), &(0x7f0000001ffc)=0xfffffffffffffe03) 2018/04/21 01:42:19 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:19 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0x0, 0xf0d]}) 2018/04/21 01:42:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000f61ffc), &(0x7f0000001ffc)=0xfffffffffffffe03) 2018/04/21 01:42:19 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0x0, 0xf0d]}) 2018/04/21 01:42:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000f61ffc), &(0x7f0000001ffc)=0xfffffffffffffe03) 2018/04/21 01:42:19 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0x0, 0xf0d]}) 2018/04/21 01:42:19 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 2: socket(0x0, 0x0, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x40000000) close(r2) r3 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x100000000, 0x18dca0000000000, 0x0, 0x0, 0xfffffffffffffffb}, 0xc) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="4e74a999143e2b59a881edba79152bdab9dd103e85b6119a66e210b2b470fcdf7a6009b19aed86b96bf8c6549fd160d5ae894b62192520dfabb854560f9dc8f3833e0536e6e9ceac61701c32"], 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1000, 0x0, &(0x7f00000000c0)}) close(r1) 2018/04/21 01:42:20 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 5: syz_emit_ethernet(0x368, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x11, 0xffffff80, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:42:20 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000f61ffc), &(0x7f0000001ffc)=0xfffffffffffffe03) 2018/04/21 01:42:20 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000857ff8), 0x8) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x2, 0x22812, r0, 0x2000000000000000) 2018/04/21 01:42:20 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/bus\x00', &(0x7f00000002c0)="7270635f706970656673008c7c647f0399287d03b74f09f3ebb5030000009df9a59c06000000000000f90ef07834c1c4", 0x0, &(0x7f0000001280)) 2018/04/21 01:42:20 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 5: syz_emit_ethernet(0x368, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x11, 0xffffff80, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:42:20 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1c9c380}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/04/21 01:42:20 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/bus\x00', &(0x7f00000002c0)="7270635f706970656673008c7c647f0399287d03b74f09f3ebb5030000009df9a59c06000000000000f90ef07834c1c4", 0x0, &(0x7f0000001280)) 2018/04/21 01:42:20 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 5: syz_emit_ethernet(0x368, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x11, 0xffffff80, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:42:20 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:20 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:21 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000857ff8), 0x8) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x2, 0x22812, r0, 0x2000000000000000) 2018/04/21 01:42:21 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0x4, 0x3, 0x8001, 0x834c, 0x0, 0x0, 0x40000, 0xd, 0x58, 0x5, 0x7fffffff, 0x5, 0x8001, 0x4a5, 0x400, 0x1, 0xac, 0x7fffffff, 0x1, 0x7fff, 0x4, 0x3, 0x9, 0x0, 0x9, 0xffffffffffff244d, 0x1, 0x7, 0x80000001, 0x5, 0x3ff, 0x7fff, 0x9, 0x10000, 0xadc6, 0x9, 0x0, 0x6, 0x6, @perf_config_ext={0x8000, 0x2}, 0x100, 0xfffffffffffffff7, 0x58f0, 0x4, 0x8, 0x8001, 0x1}, r1, 0x4, r0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x4) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r4, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) fadvise64(r2, 0x0, 0x1, 0x2) 2018/04/21 01:42:21 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r1) 2018/04/21 01:42:21 executing program 5: syz_emit_ethernet(0x368, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x11, 0xffffff80, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:42:21 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1c9c380}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/04/21 01:42:21 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/bus\x00', &(0x7f00000002c0)="7270635f706970656673008c7c647f0399287d03b74f09f3ebb5030000009df9a59c06000000000000f90ef07834c1c4", 0x0, &(0x7f0000001280)) 2018/04/21 01:42:21 executing program 0: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1c9c380}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/04/21 01:42:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000003c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/21 01:42:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000000200025f0071c0165ff0ffc0e020000000010000002e1000c08000b0000000000", 0x24) 2018/04/21 01:42:21 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1c9c380}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/04/21 01:42:21 executing program 0: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1c9c380}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) [ 115.226772] ================================================================== [ 115.234478] BUG: KASAN: null-ptr-deref in refcount_inc_not_zero+0x8f/0x2d0 [ 115.241541] Read of size 4 at addr 0000000000000004 by task syz-executor4/9368 [ 115.248912] [ 115.250565] CPU: 0 PID: 9368 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #10 [ 115.257762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.267134] Call Trace: [ 115.269757] dump_stack+0x1b9/0x294 [ 115.273441] ? dump_stack_print_info.cold.2+0x52/0x52 [ 115.278664] ? kasan_check_write+0x14/0x20 [ 115.282927] ? do_raw_spin_lock+0xc1/0x200 [ 115.287183] ? vprintk_func+0x81/0xe7 [ 115.291005] ? refcount_inc_not_zero+0x8f/0x2d0 [ 115.295689] kasan_report.cold.7+0x6d/0x2fe [ 115.300033] check_memory_region+0x13e/0x1b0 [ 115.304452] kasan_check_read+0x11/0x20 [ 115.308437] refcount_inc_not_zero+0x8f/0x2d0 [ 115.312950] ? refcount_add_not_zero+0x320/0x320 [ 115.317913] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 115.322922] ? lock_sock_nested+0x9f/0x120 [ 115.327159] refcount_inc+0x15/0x70 [ 115.330780] llc_ui_release+0xba/0x2b0 [ 115.334657] ? fsnotify_first_mark+0x330/0x330 [ 115.339254] sock_release+0x96/0x1b0 [ 115.342963] ? sock_alloc_file+0x4e0/0x4e0 [ 115.347190] sock_close+0x16/0x20 [ 115.350633] __fput+0x34d/0x890 [ 115.353911] ? fput+0x1a0/0x1a0 [ 115.357183] ? _raw_spin_unlock_irq+0x27/0x70 [ 115.361675] ____fput+0x15/0x20 [ 115.364953] task_work_run+0x1e4/0x290 [ 115.368837] ? task_work_cancel+0x240/0x240 [ 115.373161] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.378697] ? switch_task_namespaces+0xa2/0xd0 [ 115.383364] do_exit+0x1aee/0x2730 [ 115.386906] ? mm_update_next_owner+0x980/0x980 [ 115.391580] ? print_usage_bug+0xc0/0xc0 [ 115.395634] ? graph_lock+0x170/0x170 [ 115.399446] ? do_raw_spin_unlock+0x9e/0x2e0 [ 115.403850] ? rcu_note_context_switch+0x710/0x710 [ 115.408771] ? lock_acquire+0x1dc/0x520 [ 115.412759] ? __might_sleep+0x95/0x190 [ 115.416734] ? __lock_acquire+0x7f5/0x5140 [ 115.421068] ? debug_check_no_locks_freed+0x310/0x310 [ 115.426255] ? do_raw_spin_unlock+0x9e/0x2e0 [ 115.430671] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 115.435256] ? kasan_check_write+0x14/0x20 [ 115.439489] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 115.444693] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.450238] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 115.455347] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 115.460900] ? futex_wait+0x5c1/0x9f0 [ 115.464705] ? perf_trace_lock+0xd6/0x900 [ 115.468849] ? perf_trace_lock_acquire+0xe3/0x980 [ 115.473690] ? zap_class+0x720/0x720 [ 115.477411] ? perf_trace_lock+0x900/0x900 [ 115.481646] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.487180] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 115.492280] ? futex_wake+0x2f6/0x750 [ 115.496074] ? graph_lock+0x170/0x170 [ 115.499880] ? memset+0x31/0x40 [ 115.503159] ? find_held_lock+0x36/0x1c0 [ 115.507225] ? lock_downgrade+0x8e0/0x8e0 [ 115.511375] do_group_exit+0x16f/0x430 [ 115.515261] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 115.519842] ? __ia32_sys_exit+0x50/0x50 [ 115.523903] ? _raw_spin_unlock_irq+0x27/0x70 [ 115.528396] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 115.533430] get_signal+0x886/0x1960 [ 115.537157] ? ptrace_notify+0x130/0x130 [ 115.541221] ? expand_files.part.8+0x9a0/0x9a0 [ 115.545804] ? lock_downgrade+0x8e0/0x8e0 [ 115.549958] do_signal+0x98/0x2040 [ 115.553494] ? __fget_light+0x2ef/0x430 [ 115.557463] ? fget_raw+0x20/0x20 [ 115.560918] ? setup_sigcontext+0x7d0/0x7d0 [ 115.565232] ? _raw_spin_unlock+0x22/0x30 [ 115.569378] ? kcov_ioctl+0x56/0x1b0 [ 115.573090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.578623] ? do_vfs_ioctl+0x1f2/0x16a0 [ 115.582688] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.588249] ? exit_to_usermode_loop+0x87/0x310 [ 115.592924] exit_to_usermode_loop+0x28a/0x310 [ 115.597511] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 115.602351] ? do_syscall_64+0x92/0x800 [ 115.606323] do_syscall_64+0x6ac/0x800 [ 115.610207] ? syscall_return_slowpath+0x5c0/0x5c0 [ 115.615134] ? syscall_return_slowpath+0x30f/0x5c0 [ 115.620087] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 115.625484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 115.630334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.635532] RIP: 0033:0x455389 [ 115.638719] RSP: 002b:00007ffbbf392ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.646432] RAX: fffffffffffffe00 RBX: 000000000072c038 RCX: 0000000000455389 [ 115.653697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072c038 [ 115.660977] RBP: 000000000072c038 R08: 0000000000000000 R09: 000000000072c010 [ 115.668340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.675623] R13: 00007ffd1774cddf R14: 00007ffbbf3939c0 R15: 0000000000000002 [ 115.682904] ================================================================== [ 115.690256] Disabling lock debugging due to kernel taint [ 115.696234] Kernel panic - not syncing: panic_on_warn set ... [ 115.696234] [ 115.703626] CPU: 0 PID: 9368 Comm: syz-executor4 Tainted: G B 4.17.0-rc1+ #10 [ 115.712206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.721597] Call Trace: [ 115.724217] dump_stack+0x1b9/0x294 [ 115.727870] ? dump_stack_print_info.cold.2+0x52/0x52 [ 115.733090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 115.737883] ? refcount_add_not_zero+0x300/0x320 [ 115.742644] panic+0x22f/0x4de [ 115.745839] ? add_taint.cold.5+0x16/0x16 [ 115.749983] ? do_raw_spin_unlock+0x9e/0x2e0 [ 115.754390] ? do_raw_spin_unlock+0x9e/0x2e0 [ 115.758792] ? refcount_inc_not_zero+0x8f/0x2d0 [ 115.763472] kasan_end_report+0x47/0x4f [ 115.767438] kasan_report.cold.7+0x76/0x2fe [ 115.771757] check_memory_region+0x13e/0x1b0 [ 115.776158] kasan_check_read+0x11/0x20 [ 115.780137] refcount_inc_not_zero+0x8f/0x2d0 [ 115.784647] ? refcount_add_not_zero+0x320/0x320 [ 115.789418] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 115.794437] ? lock_sock_nested+0x9f/0x120 [ 115.798680] refcount_inc+0x15/0x70 [ 115.802301] llc_ui_release+0xba/0x2b0 [ 115.806184] ? fsnotify_first_mark+0x330/0x330 [ 115.810768] sock_release+0x96/0x1b0 [ 115.814479] ? sock_alloc_file+0x4e0/0x4e0 [ 115.818701] sock_close+0x16/0x20 [ 115.822153] __fput+0x34d/0x890 [ 115.825435] ? fput+0x1a0/0x1a0 [ 115.828712] ? _raw_spin_unlock_irq+0x27/0x70 [ 115.833198] ____fput+0x15/0x20 [ 115.836468] task_work_run+0x1e4/0x290 [ 115.840350] ? task_work_cancel+0x240/0x240 [ 115.844672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.850208] ? switch_task_namespaces+0xa2/0xd0 [ 115.854871] do_exit+0x1aee/0x2730 [ 115.858408] ? mm_update_next_owner+0x980/0x980 [ 115.863081] ? print_usage_bug+0xc0/0xc0 [ 115.867143] ? graph_lock+0x170/0x170 [ 115.870937] ? do_raw_spin_unlock+0x9e/0x2e0 [ 115.875357] ? rcu_note_context_switch+0x710/0x710 [ 115.880286] ? lock_acquire+0x1dc/0x520 [ 115.884276] ? __might_sleep+0x95/0x190 [ 115.888252] ? __lock_acquire+0x7f5/0x5140 [ 115.892489] ? debug_check_no_locks_freed+0x310/0x310 [ 115.897668] ? do_raw_spin_unlock+0x9e/0x2e0 [ 115.902067] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 115.906640] ? kasan_check_write+0x14/0x20 [ 115.910865] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 115.916053] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.921582] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 115.926686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 115.932229] ? futex_wait+0x5c1/0x9f0 [ 115.936024] ? perf_trace_lock+0xd6/0x900 [ 115.940162] ? perf_trace_lock_acquire+0xe3/0x980 [ 115.945007] ? zap_class+0x720/0x720 [ 115.948717] ? perf_trace_lock+0x900/0x900 [ 115.952942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.958481] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 115.960452] binder: 9365:9381 got new transaction with bad transaction stack, transaction 31 has target 9365:9366 [ 115.963602] ? futex_wake+0x2f6/0x750 [ 115.963616] ? graph_lock+0x170/0x170 [ 115.963636] ? memset+0x31/0x40 [ 115.963652] ? find_held_lock+0x36/0x1c0 [ 115.974089] binder: 9365:9381 transaction failed 29201/-71, size 0-0 line 2875 [ 115.977846] ? lock_downgrade+0x8e0/0x8e0 [ 115.977865] do_group_exit+0x16f/0x430 [ 115.977887] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 116.008853] ? __ia32_sys_exit+0x50/0x50 [ 116.012905] ? _raw_spin_unlock_irq+0x27/0x70 [ 116.017407] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 116.022412] get_signal+0x886/0x1960 [ 116.026117] ? ptrace_notify+0x130/0x130 [ 116.030174] ? expand_files.part.8+0x9a0/0x9a0 [ 116.034755] ? lock_downgrade+0x8e0/0x8e0 [ 116.038905] do_signal+0x98/0x2040 [ 116.042446] ? __fget_light+0x2ef/0x430 [ 116.046413] ? fget_raw+0x20/0x20 [ 116.049864] ? setup_sigcontext+0x7d0/0x7d0 [ 116.054195] ? _raw_spin_unlock+0x22/0x30 [ 116.058339] ? kcov_ioctl+0x56/0x1b0 [ 116.062052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.067587] ? do_vfs_ioctl+0x1f2/0x16a0 [ 116.071642] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 116.077173] ? exit_to_usermode_loop+0x87/0x310 [ 116.081837] exit_to_usermode_loop+0x28a/0x310 [ 116.086419] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 116.088901] binder: BINDER_SET_CONTEXT_MGR already set [ 116.091272] ? do_syscall_64+0x92/0x800 [ 116.091290] do_syscall_64+0x6ac/0x800 [ 116.091305] ? syscall_return_slowpath+0x5c0/0x5c0 [ 116.091323] ? syscall_return_slowpath+0x30f/0x5c0 [ 116.096710] binder: 9365:9382 ioctl 40046207 0 returned -16 [ 116.100558] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 116.100576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 116.100592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.100602] RIP: 0033:0x455389 [ 116.100614] RSP: 002b:00007ffbbf392ce8 EFLAGS: 00000246 [ 116.108981] binder_alloc: binder_alloc_mmap_handler: 9365 2000c000-2000e000 already mapped failed -16 [ 116.109388] ORIG_RAX: 00000000000000ca [ 116.109397] RAX: fffffffffffffe00 RBX: 000000000072c038 RCX: 0000000000455389 [ 116.109404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072c038 [ 116.109412] RBP: 000000000072c038 R08: 0000000000000000 R09: 000000000072c010 [ 116.109420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.109435] R13: 00007ffd1774cddf R14: 00007ffbbf3939c0 R15: 0000000000000002 [ 116.117794] binder: 9365:9381 got new transaction with bad transaction stack, transaction 31 has target 9365:9366 [ 116.120539] Dumping ftrace buffer: [ 116.120544] (ftrace buffer empty) [ 116.120548] Kernel Offset: disabled [ 116.215104] Rebooting in 86400 seconds..