0xc004, 0x0, 0x0) recvmsg(r1, &(0x7f0000df6fc8)={&(0x7f0000000040)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00000003c0)=""/169, 0xa3}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x9, &(0x7f0000c27ff9)=""/7, 0x7, 0x8000}, 0x40000100) [ 557.508689] x86/PAT: syz-executor6:31006 map pfn RAM range req write-combining for [mem 0x1cabd0000-0x1cabd3fff], got write-back 2018/04/13 21:56:38 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='.', &(0x7f0000000280)='debugfs\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) chroot(&(0x7f0000000080)='../file0\x00') pivot_root(&(0x7f00000001c0)='.', &(0x7f0000000200)='..') 2018/04/13 21:56:38 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='.', &(0x7f0000000280)='debugfs\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) chroot(&(0x7f0000000080)='../file0\x00') pivot_root(&(0x7f00000001c0)='.', &(0x7f0000000200)='..') 2018/04/13 21:56:38 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/13 21:56:38 executing program 0: r0 = perf_event_open(&(0x7f0000bba000)={0x0, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x8080c, 0x3fffffffffffe) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000002000), 0x8a) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000540)=0x7a, 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f000074fffc)=0x3, 0x4) clock_settime(0x7, &(0x7f0000000440)={0x77359400}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/101, &(0x7f00000004c0)=""/127, &(0x7f00000007c0)=""/4096, 0x6000}) sendto$inet6(r2, &(0x7f0000000080)="e5d2a0c7d829", 0x6, 0x3c, &(0x7f00000000c0)={0xa, 0x4e21, 0x21, @dev={0xfe, 0x80, [], 0x11}, 0x3ff}, 0x1c) r4 = memfd_create(&(0x7f0000000280)='user}systemloeth1procsystemuser\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r5 = dup(r3) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xfc) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040), 0x4) fadvise64(r3, 0x0, 0x1ca7, 0x1) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 2018/04/13 21:56:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) 2018/04/13 21:56:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) 2018/04/13 21:56:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x6, 0x83) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000a80)={@loopback}, &(0x7f00000009c0)=0xfffffffffffffeb1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) lstat(&(0x7f0000962000)='./file0\x00', &(0x7f0000e2b000)={0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x88008400, &(0x7f0000000540)="808eaddd23d7c40e78e8e014524f9beea89a979cf37606a623142db922198f3e557164599a52ecdcce68ef5f9dce69c8fae342e275ab45abd03a81d719ddfae434829289d8552f7209af3d0adafcaed7281e4ca3aea1052faf11e06357c2", &(0x7f0000000380), &(0x7f00000005c0), &(0x7f0000000600)="456f17221c12a7d8b8297550ba0278e5d8e6ad3a6fe7e9073e50669cee23fada") setuid(r2) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000c51000)={0x5, 0x7, 0x0, 0x7, 0x10000}) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) connect(r1, &(0x7f0000fe9ff0)=@nfc={0x27, 0x80000000, 0x8, 0x7}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000000)={0x7, 0x1, 0x7fffffff, 0x3ff, 0x349a1075, 0xff, 0x7, 0x5d9, 0xfffffffffffffbff, 0x7c}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000980)={0x0, 0x0}) sendto$inet(r1, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mbind(&(0x7f0000097000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000fa8ff8), 0x40, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000defffc), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f00000008c0)=""/88) umount2(&(0x7f0000385ff8)='./file0\x00', 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1) r6 = fcntl$getown(r0, 0x9) r7 = syz_open_procfs(r6, &(0x7f0000000680)="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") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000afcff8)={r8, 0x80}, &(0x7f00002c2ffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f000080dfe0)={0x9, 0x1}, 0x20) sendto$inet(r1, &(0x7f0000b0c000)="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", 0x1001, 0xc004, 0x0, 0x0) recvmsg(r1, &(0x7f0000df6fc8)={&(0x7f0000000040)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00000003c0)=""/169, 0xa3}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x9, &(0x7f0000c27ff9)=""/7, 0x7, 0x8000}, 0x40000100) 2018/04/13 21:56:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x6, 0x83) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000a80)={@loopback}, &(0x7f00000009c0)=0xfffffffffffffeb1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) lstat(&(0x7f0000962000)='./file0\x00', &(0x7f0000e2b000)={0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x88008400, &(0x7f0000000540)="808eaddd23d7c40e78e8e014524f9beea89a979cf37606a623142db922198f3e557164599a52ecdcce68ef5f9dce69c8fae342e275ab45abd03a81d719ddfae434829289d8552f7209af3d0adafcaed7281e4ca3aea1052faf11e06357c2", &(0x7f0000000380), &(0x7f00000005c0), &(0x7f0000000600)="456f17221c12a7d8b8297550ba0278e5d8e6ad3a6fe7e9073e50669cee23fada") setuid(r2) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000c51000)={0x5, 0x7, 0x0, 0x7, 0x10000}) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) connect(r1, &(0x7f0000fe9ff0)=@nfc={0x27, 0x80000000, 0x8, 0x7}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000000)={0x7, 0x1, 0x7fffffff, 0x3ff, 0x349a1075, 0xff, 0x7, 0x5d9, 0xfffffffffffffbff, 0x7c}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000980)={0x0, 0x0}) sendto$inet(r1, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mbind(&(0x7f0000097000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000fa8ff8), 0x40, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000defffc), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f00000008c0)=""/88) umount2(&(0x7f0000385ff8)='./file0\x00', 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000d80)=ANY=[@ANYBLOB="075c61f41de000000288e5008a010000b9140013ae1400aa0000f103e00000025a0f0000000000002b831a7711efabc879607403c21d9c7ea3959dd36286b7503688f10c51e5065e691080b6d91ba8fb86dc80d8002a5c445f9eabf17b9a4a57872f056a4eb2e43fdbcb01b39479da8ebebb452d5877bb2bfccaf9aeb469a5e290f0a289c6b41388eff4327aa5019ff0f88e6b81a81157c0f9be0b064f97912021439edc900a67f7bec8a2a670e08cf7ea97550a1f232090212acbb1a3d36e430f0145269c37e65658cb9377fc792e91b458987ebb34edbefdd20248d2cfe88a5d7af578aaa1f4e5f318c8af2f0bf0c8ae8d4b611c87025fa4750e58bdb3c671fc8fb8635ebf571d5748c87094e0bc989a48869ef44dda59cc7f7235c6f8b4cd37c162cf19b31ecd3b621c22d75e0fdb71b872a54f656beccfaf6a882cc7c8b4253b95ab02fc09ee078fe575d86c78ad1c598f6720c727f3d925cc72479d18d4c6dcff88a9366c3552"], 0x1) r6 = fcntl$getown(r0, 0x9) r7 = syz_open_procfs(r6, &(0x7f0000000680)="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") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000afcff8)={r8, 0x80}, &(0x7f00002c2ffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f000080dfe0)={0x9, 0x1}, 0x20) sendto$inet(r1, &(0x7f0000b0c000)="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", 0x1001, 0xc004, 0x0, 0x0) recvmsg(r1, &(0x7f0000df6fc8)={&(0x7f0000000040)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00000003c0)=""/169, 0xa3}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x9, &(0x7f0000c27ff9)=""/7, 0x7, 0x8000}, 0x40000100) 2018/04/13 21:56:38 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x800, 'gretap0\x00', 'nr0\x00', 'vcan0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}}}]}}, @snat={'snat\x00', 0x10, {{@random="fb63154ca83c", 0xffffffffffffffff}}}}]}]}, 0x1f8) 2018/04/13 21:56:38 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/13 21:56:38 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x3, 0x0, 0x200005) dup2(r0, r1) 2018/04/13 21:56:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x200c0010140}]}) 2018/04/13 21:56:38 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='.', &(0x7f0000000280)='debugfs\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) chroot(&(0x7f0000000080)='../file0\x00') pivot_root(&(0x7f00000001c0)='.', &(0x7f0000000200)='..') 2018/04/13 21:56:39 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x3, 0x0, 0x200005) dup2(r0, r1) 2018/04/13 21:56:39 executing program 0: r0 = perf_event_open(&(0x7f0000bba000)={0x0, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x8080c, 0x3fffffffffffe) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000002000), 0x8a) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000540)=0x7a, 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f000074fffc)=0x3, 0x4) clock_settime(0x7, &(0x7f0000000440)={0x77359400}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/101, &(0x7f00000004c0)=""/127, &(0x7f00000007c0)=""/4096, 0x6000}) sendto$inet6(r2, &(0x7f0000000080)="e5d2a0c7d829", 0x6, 0x3c, &(0x7f00000000c0)={0xa, 0x4e21, 0x21, @dev={0xfe, 0x80, [], 0x11}, 0x3ff}, 0x1c) r4 = memfd_create(&(0x7f0000000280)='user}systemloeth1procsystemuser\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r5 = dup(r3) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xfc) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040), 0x4) fadvise64(r3, 0x0, 0x1ca7, 0x1) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 2018/04/13 21:56:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x800, 'gretap0\x00', 'nr0\x00', 'vcan0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}}}]}}, @snat={'snat\x00', 0x10, {{@random="fb63154ca83c", 0xffffffffffffffff}}}}]}]}, 0x1f8) 2018/04/13 21:56:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) 2018/04/13 21:56:39 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/13 21:56:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000008000000b338cc01"], 0x14}}], 0x2, 0x0) 2018/04/13 21:56:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x200c0010140}]}) 2018/04/13 21:56:39 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xa90d, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/04/13 21:56:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x800, 'gretap0\x00', 'nr0\x00', 'vcan0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}}}]}}, @snat={'snat\x00', 0x10, {{@random="fb63154ca83c", 0xffffffffffffffff}}}}]}]}, 0x1f8) 2018/04/13 21:56:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)) 2018/04/13 21:56:39 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/13 21:56:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000008000000b338cc01"], 0x14}}], 0x2, 0x0) 2018/04/13 21:56:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x200c0010140}]}) 2018/04/13 21:56:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) 2018/04/13 21:56:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x800, 'gretap0\x00', 'nr0\x00', 'vcan0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}}}]}}, @snat={'snat\x00', 0x10, {{@random="fb63154ca83c", 0xffffffffffffffff}}}}]}]}, 0x1f8) 2018/04/13 21:56:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000008000000b338cc01"], 0x14}}], 0x2, 0x0) 2018/04/13 21:56:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)) 2018/04/13 21:56:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000), &(0x7f0000abaffc)=0x8) 2018/04/13 21:56:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000008000000b338cc01"], 0x14}}], 0x2, 0x0) 2018/04/13 21:56:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) 2018/04/13 21:56:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/206, 0xce}], 0x1) 2018/04/13 21:56:40 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x3, 0x0, 0x200005) dup2(r0, r1) 2018/04/13 21:56:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x200c0010140}]}) 2018/04/13 21:56:40 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xa90d, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/04/13 21:56:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)) 2018/04/13 21:56:40 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@multicast2=0xe0000002, @multicast1=0xe0000001]}, 0x18) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x0, 0x1000, 0x9, 0x7, 0xb9c7, 0x0, 0x3, 0xffffffff, 0x10000}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/13 21:56:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000), &(0x7f0000abaffc)=0x8) 2018/04/13 21:56:40 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00007b6000)=""/101) 2018/04/13 21:56:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) 2018/04/13 21:56:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x0, "ee2e94d1e083"}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="660f382b3cbaf80c66b870b7f98e66efbafc0cb80d00ef0f017901baf80c66b8b4c3eb8066efbafc0c66b80000010066ef3e660f686f05260f135a77bad004b000ee0f20df66b9f709000066b80090000066ba000000000f300e", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 2018/04/13 21:56:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000), &(0x7f0000abaffc)=0x8) 2018/04/13 21:56:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@multicast2=0xe0000002, @multicast1=0xe0000001]}, 0x18) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x0, 0x1000, 0x9, 0x7, 0xb9c7, 0x0, 0x3, 0xffffffff, 0x10000}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/13 21:56:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)) 2018/04/13 21:56:41 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00007b6000)=""/101) 2018/04/13 21:56:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x0, "ee2e94d1e083"}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="660f382b3cbaf80c66b870b7f98e66efbafc0cb80d00ef0f017901baf80c66b8b4c3eb8066efbafc0c66b80000010066ef3e660f686f05260f135a77bad004b000ee0f20df66b9f709000066b80090000066ba000000000f300e", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 2018/04/13 21:56:41 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40800000c004500a, &(0x7f0000000000)) 2018/04/13 21:56:41 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x3, 0x0, 0x200005) dup2(r0, r1) 2018/04/13 21:56:41 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xa90d, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/04/13 21:56:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@multicast2=0xe0000002, @multicast1=0xe0000001]}, 0x18) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x0, 0x1000, 0x9, 0x7, 0xb9c7, 0x0, 0x3, 0xffffffff, 0x10000}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/13 21:56:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000), &(0x7f0000abaffc)=0x8) 2018/04/13 21:56:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x0, "ee2e94d1e083"}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="660f382b3cbaf80c66b870b7f98e66efbafc0cb80d00ef0f017901baf80c66b8b4c3eb8066efbafc0c66b80000010066ef3e660f686f05260f135a77bad004b000ee0f20df66b9f709000066b80090000066ba000000000f300e", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 2018/04/13 21:56:41 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00007b6000)=""/101) 2018/04/13 21:56:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000651ff8)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 21:56:41 executing program 0: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000000c0)) 2018/04/13 21:56:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@multicast2=0xe0000002, @multicast1=0xe0000001]}, 0x18) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x0, 0x1000, 0x9, 0x7, 0xb9c7, 0x0, 0x3, 0xffffffff, 0x10000}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/13 21:56:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)="2e2f30e530653000", 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/04/13 21:56:41 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000013000)) dup2(r0, r2) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/13 21:56:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)="2e2f30e530653000", 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/04/13 21:56:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40046104, &(0x7f00000000c0)) 2018/04/13 21:56:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x0, "ee2e94d1e083"}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="660f382b3cbaf80c66b870b7f98e66efbafc0cb80d00ef0f017901baf80c66b8b4c3eb8066efbafc0c66b80000010066ef3e660f686f05260f135a77bad004b000ee0f20df66b9f709000066b80090000066ba000000000f300e", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 2018/04/13 21:56:42 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00007b6000)=""/101) 2018/04/13 21:56:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)="2e2f30e530653000", 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/04/13 21:56:42 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xa90d, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/04/13 21:56:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40046104, &(0x7f00000000c0)) 2018/04/13 21:56:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)="2e2f30e530653000", 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/04/13 21:56:42 executing program 6: mkdir(&(0x7f0000771000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2018/04/13 21:56:42 executing program 5: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 2018/04/13 21:56:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/13 21:56:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='gid_map\x00') write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}}], 0x18) 2018/04/13 21:56:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000013000)) dup2(r0, r2) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/13 21:56:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40046104, &(0x7f00000000c0)) 2018/04/13 21:56:43 executing program 5: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 2018/04/13 21:56:43 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="89deb3262722", [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x6, 0x0, 0x28}}}}}, &(0x7f0000000380)) 2018/04/13 21:56:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/13 21:56:43 executing program 6: mkdir(&(0x7f0000771000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2018/04/13 21:56:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1000001, 0x8011, r0, 0x0) 2018/04/13 21:56:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1000001, 0x8011, r0, 0x0) 2018/04/13 21:56:43 executing program 5: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 2018/04/13 21:56:43 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="89deb3262722", [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x6, 0x0, 0x28}}}}}, &(0x7f0000000380)) 2018/04/13 21:56:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/13 21:56:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40046104, &(0x7f00000000c0)) 2018/04/13 21:56:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000013000)) dup2(r0, r2) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/13 21:56:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='gid_map\x00') write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}}], 0x18) 2018/04/13 21:56:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1000001, 0x8011, r0, 0x0) 2018/04/13 21:56:44 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="89deb3262722", [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x6, 0x0, 0x28}}}}}, &(0x7f0000000380)) 2018/04/13 21:56:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/13 21:56:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 21:56:44 executing program 6: mkdir(&(0x7f0000771000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2018/04/13 21:56:44 executing program 5: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 2018/04/13 21:56:44 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/13 21:56:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1000001, 0x8011, r0, 0x0) 2018/04/13 21:56:44 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="89deb3262722", [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x6, 0x0, 0x28}}}}}, &(0x7f0000000380)) 2018/04/13 21:56:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='gid_map\x00') write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}}], 0x18) 2018/04/13 21:56:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000159ee0)={0x80000001, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca50b3e23550375247d84"}) 2018/04/13 21:56:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 21:56:44 executing program 6: mkdir(&(0x7f0000771000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2018/04/13 21:56:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x8c2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) mq_timedsend(r1, &(0x7f0000e71fff), 0x0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000240), 0x0, 0x0, &(0x7f000058eff0)={0x77359400}) 2018/04/13 21:56:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000013000)) dup2(r0, r2) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/13 21:56:44 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/13 21:56:45 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x8035, 0xd, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 21:56:45 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xf15, 0x0, 0x0, {}, [@IFLA_MAP={0x28, 0xe}]}, 0x48}, 0x1}, 0x0) 2018/04/13 21:56:45 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) syncfs(r0) 2018/04/13 21:56:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000159ee0)={0x80000001, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca50b3e23550375247d84"}) 2018/04/13 21:56:45 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x8035, 0xd, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 21:56:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/13 21:56:45 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xf15, 0x0, 0x0, {}, [@IFLA_MAP={0x28, 0xe}]}, 0x48}, 0x1}, 0x0) 2018/04/13 21:56:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='gid_map\x00') write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}}], 0x18) 2018/04/13 21:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 21:56:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000159ee0)={0x80000001, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca50b3e23550375247d84"}) 2018/04/13 21:56:45 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) syncfs(r0) 2018/04/13 21:56:45 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x8035, 0xd, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 21:56:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/13 21:56:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)) 2018/04/13 21:56:45 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x8035, 0xd, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 21:56:46 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000365ff8), &(0x7f0000869000), 0x0) 2018/04/13 21:56:46 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xf15, 0x0, 0x0, {}, [@IFLA_MAP={0x28, 0xe}]}, 0x48}, 0x1}, 0x0) 2018/04/13 21:56:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/04/13 21:56:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000159ee0)={0x80000001, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "e25ffeb925fca50b3e23550375247d84"}) 2018/04/13 21:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 21:56:46 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) syncfs(r0) 2018/04/13 21:56:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 2018/04/13 21:56:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)) 2018/04/13 21:56:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x10000000010000) 2018/04/13 21:56:47 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xf15, 0x0, 0x0, {}, [@IFLA_MAP={0x28, 0xe}]}, 0x48}, 0x1}, 0x0) 2018/04/13 21:56:47 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11"]}) 2018/04/13 21:56:47 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) syncfs(r0) 2018/04/13 21:56:47 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000365ff8), &(0x7f0000869000), 0x0) 2018/04/13 21:56:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/04/13 21:56:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 2018/04/13 21:56:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/04/13 21:56:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) close(r0) 2018/04/13 21:56:47 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f00009b4000)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f00006d1000)=""/195}, 0x48) 2018/04/13 21:56:47 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11"]}) 2018/04/13 21:56:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 2018/04/13 21:56:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/04/13 21:56:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x10000000010000) 2018/04/13 21:56:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 2018/04/13 21:56:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)) 2018/04/13 21:56:48 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11"]}) 2018/04/13 21:56:48 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f00009b4000)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f00006d1000)=""/195}, 0x48) 2018/04/13 21:56:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/04/13 21:56:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x10000000010000) 2018/04/13 21:56:48 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/13 21:56:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)) 2018/04/13 21:56:48 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000365ff8), &(0x7f0000869000), 0x0) 2018/04/13 21:56:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) close(r0) 2018/04/13 21:56:48 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/13 21:56:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x10000000010000) 2018/04/13 21:56:48 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/13 21:56:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e100", 0x88, r1) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="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", 0x101, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/13 21:56:48 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f00009b4000)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f00006d1000)=""/195}, 0x48) 2018/04/13 21:56:48 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11"]}) 2018/04/13 21:56:48 executing program 3: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000516000)) socket$nl_route(0x10, 0x3, 0x0) 2018/04/13 21:56:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a060000ec04a200000543dfd87c5800004824ca943264008900050000000000000000048302000000ea000004000003d46b05a38100000010000100070c09040000000000000005", 0x58}], 0x1) 2018/04/13 21:56:49 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/13 21:56:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a060000ec04a200000543dfd87c5800004824ca943264008900050000000000000000048302000000ea000004000003d46b05a38100000010000100070c09040000000000000005", 0x58}], 0x1) 2018/04/13 21:56:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000320000)='/dev/sequencer2\x00', 0x5, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000006fff)) 2018/04/13 21:56:49 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f00009b4000)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f00006d1000)=""/195}, 0x48) 2018/04/13 21:56:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 21:56:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e100", 0x88, r1) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="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", 0x101, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/13 21:56:49 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000365ff8), &(0x7f0000869000), 0x0) 2018/04/13 21:56:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) close(r0) 2018/04/13 21:56:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 21:56:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a060000ec04a200000543dfd87c5800004824ca943264008900050000000000000000048302000000ea000004000003d46b05a38100000010000100070c09040000000000000005", 0x58}], 0x1) 2018/04/13 21:56:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e100", 0x88, r1) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="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", 0x101, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/13 21:56:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000320000)='/dev/sequencer2\x00', 0x5, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000006fff)) 2018/04/13 21:56:49 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000600)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="647e2a652232639cbcde0b32e70219823491978b87b0a5bd3a18393a0f1a21989c3617b2", 0x24}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @empty, 0xa0000000}, 0x1c) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r1) 2018/04/13 21:56:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 21:56:49 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 21:56:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e100", 0x88, r1) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="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", 0x101, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 2018/04/13 21:56:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) close(r0) 2018/04/13 21:56:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000320000)='/dev/sequencer2\x00', 0x5, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000006fff)) 2018/04/13 21:56:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a060000ec04a200000543dfd87c5800004824ca943264008900050000000000000000048302000000ea000004000003d46b05a38100000010000100070c09040000000000000005", 0x58}], 0x1) 2018/04/13 21:56:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000600)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="647e2a652232639cbcde0b32e70219823491978b87b0a5bd3a18393a0f1a21989c3617b2", 0x24}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @empty, 0xa0000000}, 0x1c) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r1) 2018/04/13 21:56:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 21:56:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 21:56:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 21:56:50 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000493000)=[{&(0x7f0000bae000)="58000000140019f700db4b01040d8c560a06000000000410489619c3001158a2e04a03ca8164243e8900000028215a0004fbf50dfff90004a50b00ff001c0843000000000000221f080001000a000400000100ec6b0f076e", 0x58}], 0x1) 2018/04/13 21:56:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000600)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="647e2a652232639cbcde0b32e70219823491978b87b0a5bd3a18393a0f1a21989c3617b2", 0x24}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @empty, 0xa0000000}, 0x1c) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r1) 2018/04/13 21:56:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000320000)='/dev/sequencer2\x00', 0x5, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000006fff)) 2018/04/13 21:56:50 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000493000)=[{&(0x7f0000bae000)="58000000140019f700db4b01040d8c560a06000000000410489619c3001158a2e04a03ca8164243e8900000028215a0004fbf50dfff90004a50b00ff001c0843000000000000221f080001000a000400000100ec6b0f076e", 0x58}], 0x1) 2018/04/13 21:56:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 21:56:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) r2 = epoll_create(0x45) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000f43000), 0x8) 2018/04/13 21:56:50 executing program 4: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000200)="eb810de94c00d3d4475fa5c836c70400000000000000e349f9867b60a73dcafba4a7e6394a863ceb01826747db4e9750ac249d8b49eb58c1beecb3181f33ae8d924f6c79fec4d3480db5353ec18b1aac53d8cef942728c443eb1b7ba8d70bda0f2d797cc4458fc943225bcf190b5b33a52af237113c693c75fbd5769ee1d92e238fe") mkdir(&(0x7f0000000280)='.', 0x0) 2018/04/13 21:56:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000600)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="647e2a652232639cbcde0b32e70219823491978b87b0a5bd3a18393a0f1a21989c3617b2", 0x24}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @empty, 0xa0000000}, 0x1c) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r1) 2018/04/13 21:56:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 21:56:51 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000493000)=[{&(0x7f0000bae000)="58000000140019f700db4b01040d8c560a06000000000410489619c3001158a2e04a03ca8164243e8900000028215a0004fbf50dfff90004a50b00ff001c0843000000000000221f080001000a000400000100ec6b0f076e", 0x58}], 0x1) 2018/04/13 21:56:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000009300)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000012c0)}}], 0x1, 0x0) 2018/04/13 21:56:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x20040000020}]}) 2018/04/13 21:56:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) r2 = epoll_create(0x45) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000f43000), 0x8) 2018/04/13 21:56:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 21:56:51 executing program 4: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000200)="eb810de94c00d3d4475fa5c836c70400000000000000e349f9867b60a73dcafba4a7e6394a863ceb01826747db4e9750ac249d8b49eb58c1beecb3181f33ae8d924f6c79fec4d3480db5353ec18b1aac53d8cef942728c443eb1b7ba8d70bda0f2d797cc4458fc943225bcf190b5b33a52af237113c693c75fbd5769ee1d92e238fe") mkdir(&(0x7f0000000280)='.', 0x0) 2018/04/13 21:56:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 21:56:51 executing program 2: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) [ 570.532132] kvm [31492]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 [ 570.625295] kvm [31492]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/04/13 21:56:51 executing program 4: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000200)="eb810de94c00d3d4475fa5c836c70400000000000000e349f9867b60a73dcafba4a7e6394a863ceb01826747db4e9750ac249d8b49eb58c1beecb3181f33ae8d924f6c79fec4d3480db5353ec18b1aac53d8cef942728c443eb1b7ba8d70bda0f2d797cc4458fc943225bcf190b5b33a52af237113c693c75fbd5769ee1d92e238fe") mkdir(&(0x7f0000000280)='.', 0x0) 2018/04/13 21:56:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000009300)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000012c0)}}], 0x1, 0x0) 2018/04/13 21:56:51 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000493000)=[{&(0x7f0000bae000)="58000000140019f700db4b01040d8c560a06000000000410489619c3001158a2e04a03ca8164243e8900000028215a0004fbf50dfff90004a50b00ff001c0843000000000000221f080001000a000400000100ec6b0f076e", 0x58}], 0x1) 2018/04/13 21:56:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) r2 = epoll_create(0x45) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000f43000), 0x8) 2018/04/13 21:56:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x20040000020}]}) 2018/04/13 21:56:51 executing program 4: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000200)="eb810de94c00d3d4475fa5c836c70400000000000000e349f9867b60a73dcafba4a7e6394a863ceb01826747db4e9750ac249d8b49eb58c1beecb3181f33ae8d924f6c79fec4d3480db5353ec18b1aac53d8cef942728c443eb1b7ba8d70bda0f2d797cc4458fc943225bcf190b5b33a52af237113c693c75fbd5769ee1d92e238fe") mkdir(&(0x7f0000000280)='.', 0x0) 2018/04/13 21:56:51 executing program 2: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) 2018/04/13 21:56:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 570.944166] kvm [31513]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/04/13 21:56:51 executing program 4: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) 2018/04/13 21:56:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)) 2018/04/13 21:56:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000009300)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000012c0)}}], 0x1, 0x0) 2018/04/13 21:56:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x20040000020}]}) 2018/04/13 21:56:51 executing program 2: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) [ 571.234086] kvm [31533]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/04/13 21:56:51 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)) 2018/04/13 21:56:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000009300)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000012c0)}}], 0x1, 0x0) 2018/04/13 21:56:51 executing program 4: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) 2018/04/13 21:56:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) r2 = epoll_create(0x45) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000f43000), 0x8) 2018/04/13 21:56:51 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)=0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0xffffffffffff9cd2, 0x0, 0xe}) 2018/04/13 21:56:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)) 2018/04/13 21:56:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x20040000020}]}) 2018/04/13 21:56:51 executing program 2: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) [ 571.461874] kvm [31540]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/04/13 21:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200), 0x0, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/13 21:56:52 executing program 1: socket$inet6(0xa, 0x1, 0x8010000400000084) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw32}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x306, @random="28ab92e8ab5f"}, 0x8, {0x2, 0x4e23, @loopback=0x7f000001}, 'irlan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d}}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000540)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r1, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x1f, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)="73797202616c6c657200", 0x1bca, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240)=0xffffffffffff0000, 0x0) 2018/04/13 21:56:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0xebc}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010141}]}) 2018/04/13 21:56:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)) 2018/04/13 21:56:52 executing program 6: r0 = gettid() prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 2018/04/13 21:56:52 executing program 4: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f000094f000), 0x269, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r6}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) 2018/04/13 21:56:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)=0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0xffffffffffff9cd2, 0x0, 0xe}) 2018/04/13 21:56:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0xebc}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010141}]}) 2018/04/13 21:56:52 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/28, 0x1c) 2018/04/13 21:56:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:52 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/28, 0x1c) 2018/04/13 21:56:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0xebc}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010141}]}) 2018/04/13 21:56:52 executing program 6: r0 = gettid() prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 2018/04/13 21:56:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)) 2018/04/13 21:56:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)=0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0xffffffffffff9cd2, 0x0, 0xe}) 2018/04/13 21:56:52 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) mount(&(0x7f0000e97ff6)='./control\x00', &(0x7f00007ec000)='./control\x00', &(0x7f0000595000)='ramfs\x00', 0x0, &(0x7f0000f9f000)) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) personality(0x5000007) mkdirat(r1, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./control/file0\x00', r2, &(0x7f0000000000)='./control\x00') renameat2(r2, &(0x7f000003aff6)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480940, 0x0) 2018/04/13 21:56:52 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/28, 0x1c) 2018/04/13 21:56:52 executing program 6: r0 = gettid() prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 2018/04/13 21:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0xebc}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010141}]}) 2018/04/13 21:56:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) 2018/04/13 21:56:52 executing program 6: r0 = gettid() prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 2018/04/13 21:56:52 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/28, 0x1c) 2018/04/13 21:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:52 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) mount(&(0x7f0000e97ff6)='./control\x00', &(0x7f00007ec000)='./control\x00', &(0x7f0000595000)='ramfs\x00', 0x0, &(0x7f0000f9f000)) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) personality(0x5000007) mkdirat(r1, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./control/file0\x00', r2, &(0x7f0000000000)='./control\x00') renameat2(r2, &(0x7f000003aff6)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480940, 0x0) 2018/04/13 21:56:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)=0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0xffffffffffff9cd2, 0x0, 0xe}) 2018/04/13 21:56:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)=@nfc_llcp, 0x60, &(0x7f0000000680)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/205, 0xcd}], 0x9, &(0x7f0000000740)=""/75, 0x4b, 0xfffffffffffffff8}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/174, 0xae}}], 0x2, 0x3, &(0x7f0000002380)={0x77359400}) 2018/04/13 21:56:53 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff}) 2018/04/13 21:56:53 executing program 3: timerfd_create(0x9, 0x0) 2018/04/13 21:56:53 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) mount(&(0x7f0000e97ff6)='./control\x00', &(0x7f00007ec000)='./control\x00', &(0x7f0000595000)='ramfs\x00', 0x0, &(0x7f0000f9f000)) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) personality(0x5000007) mkdirat(r1, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./control/file0\x00', r2, &(0x7f0000000000)='./control\x00') renameat2(r2, &(0x7f000003aff6)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480940, 0x0) [ 572.682791] irq bypass consumer (token 0000000027d60772) registration fails: -16 2018/04/13 21:56:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)=@nfc_llcp, 0x60, &(0x7f0000000680)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/205, 0xcd}], 0x9, &(0x7f0000000740)=""/75, 0x4b, 0xfffffffffffffff8}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/174, 0xae}}], 0x2, 0x3, &(0x7f0000002380)={0x77359400}) 2018/04/13 21:56:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x200) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a8b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2681cf00009c660f23240f4f190f017db1ba2000edf20f22c666b9ca09000066b8f0ffffff66bafeffffff0f3066b97b0800000f320f644e00", 0x39}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x4000}], 0x1) 2018/04/13 21:56:53 executing program 3: timerfd_create(0x9, 0x0) 2018/04/13 21:56:53 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000140), 0x1) 2018/04/13 21:56:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) 2018/04/13 21:56:53 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) mount(&(0x7f0000e97ff6)='./control\x00', &(0x7f00007ec000)='./control\x00', &(0x7f0000595000)='ramfs\x00', 0x0, &(0x7f0000f9f000)) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) personality(0x5000007) mkdirat(r1, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./control/file0\x00', r2, &(0x7f0000000000)='./control\x00') renameat2(r2, &(0x7f000003aff6)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480940, 0x0) 2018/04/13 21:56:53 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff}) 2018/04/13 21:56:53 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/13 21:56:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)=@nfc_llcp, 0x60, &(0x7f0000000680)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/205, 0xcd}], 0x9, &(0x7f0000000740)=""/75, 0x4b, 0xfffffffffffffff8}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/174, 0xae}}], 0x2, 0x3, &(0x7f0000002380)={0x77359400}) 2018/04/13 21:56:53 executing program 3: timerfd_create(0x9, 0x0) 2018/04/13 21:56:53 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000140), 0x1) 2018/04/13 21:56:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)=@nfc_llcp, 0x60, &(0x7f0000000680)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/205, 0xcd}], 0x9, &(0x7f0000000740)=""/75, 0x4b, 0xfffffffffffffff8}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/174, 0xae}}], 0x2, 0x3, &(0x7f0000002380)={0x77359400}) 2018/04/13 21:56:53 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff}) 2018/04/13 21:56:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) 2018/04/13 21:56:53 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000140), 0x1) 2018/04/13 21:56:53 executing program 3: timerfd_create(0x9, 0x0) 2018/04/13 21:56:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340a14b80fd0d8c560a061d000000e076000543d8d8fe5000000024ca7f4f643e89f80400286373000510f5100002000000000000001c04ed5dfffff500002f000d000100041108000014ff0000000005", 0x58}], 0x1) 2018/04/13 21:56:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000005c0)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f00000007c0)}) 2018/04/13 21:56:53 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) 2018/04/13 21:56:53 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/13 21:56:53 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) [ 573.268727] binder: 31675 invalid dec weak, ref 190 desc 0 s 1 w 0 2018/04/13 21:56:53 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff}) 2018/04/13 21:56:53 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/191, &(0x7f0000000380)=0xbf) r1 = userfaultfd(0x0) r2 = dup(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/213) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x14a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x6, 0x54, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x3) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x1ff}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x80) 2018/04/13 21:56:53 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000140), 0x1) 2018/04/13 21:56:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340a14b80fd0d8c560a061d000000e076000543d8d8fe5000000024ca7f4f643e89f80400286373000510f5100002000000000000001c04ed5dfffff500002f000d000100041108000014ff0000000005", 0x58}], 0x1) 2018/04/13 21:56:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) 2018/04/13 21:56:53 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/13 21:56:53 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/13 21:56:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000005c0)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f00000007c0)}) [ 573.311884] binder: BINDER_SET_CONTEXT_MGR already set [ 573.324749] binder: 31675:31680 ioctl 40046207 0 returned -16 [ 573.335809] binder: 31675 invalid dec weak, ref 191 desc 0 s 1 w 0 2018/04/13 21:56:54 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/191, &(0x7f0000000380)=0xbf) r1 = userfaultfd(0x0) r2 = dup(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/213) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x14a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x6, 0x54, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x3) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x1ff}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x80) 2018/04/13 21:56:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340a14b80fd0d8c560a061d000000e076000543d8d8fe5000000024ca7f4f643e89f80400286373000510f5100002000000000000001c04ed5dfffff500002f000d000100041108000014ff0000000005", 0x58}], 0x1) 2018/04/13 21:56:54 executing program 3: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/13 21:56:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0)="a69fa503", 0x4) 2018/04/13 21:56:54 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/13 21:56:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x2, r2, 0x7}) 2018/04/13 21:56:54 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x2004e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000280)="aff8ca3dd1f90ad2d22dec9700f3a8697d00790b1cbd63c4e6474fb56db74558027af0ba949f41c6935138ebc546e237d6cdb15a1c95c7e2279884a2ff7ebefc72dab05dd974bb7fbdbd2cf0bfc55a398b663a80835f858cad1abe540f685f186b7a356bcc8ffb4f818c2b0e0b13b5d4b0cae04681c446ba2ae66d27a08b931627cf", 0x82, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="90", 0x1, 0x881, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 573.613659] binder: 31694 invalid dec weak, ref 193 desc 0 s 1 w 0 2018/04/13 21:56:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000005c0)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f00000007c0)}) 2018/04/13 21:56:54 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/191, &(0x7f0000000380)=0xbf) r1 = userfaultfd(0x0) r2 = dup(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/213) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x14a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x6, 0x54, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x3) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x1ff}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x80) 2018/04/13 21:56:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340a14b80fd0d8c560a061d000000e076000543d8d8fe5000000024ca7f4f643e89f80400286373000510f5100002000000000000001c04ed5dfffff500002f000d000100041108000014ff0000000005", 0x58}], 0x1) 2018/04/13 21:56:54 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000685ff0)=@in={0x2, 0x3}, 0x10, &(0x7f0000fc5fc0)}, 0x8000) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000fd5000)="04", 0x1, 0x0, &(0x7f000089cfe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) 2018/04/13 21:56:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000deaff6)='numa_maps\x00') pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f00000f9000)=[{&(0x7f00009fb079)=""/4096, 0x1000}], 0x1) 2018/04/13 21:56:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) 2018/04/13 21:56:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0)="a69fa503", 0x4) 2018/04/13 21:56:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x2, r2, 0x7}) 2018/04/13 21:56:54 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/191, &(0x7f0000000380)=0xbf) r1 = userfaultfd(0x0) r2 = dup(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/213) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x14a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x6, 0x54, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x3) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x1ff}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x80) 2018/04/13 21:56:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0)="a69fa503", 0x4) 2018/04/13 21:56:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x2, r2, 0x7}) 2018/04/13 21:56:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) [ 574.093592] binder: 31723 invalid dec weak, ref 195 desc 0 s 1 w 0 2018/04/13 21:56:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000deaff6)='numa_maps\x00') pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f00000f9000)=[{&(0x7f00009fb079)=""/4096, 0x1000}], 0x1) 2018/04/13 21:56:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000005c0)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f00000007c0)}) 2018/04/13 21:56:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) [ 574.301623] binder: 31748 invalid dec weak, ref 197 desc 0 s 1 w 0 2018/04/13 21:56:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x2, r2, 0x7}) 2018/04/13 21:56:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) 2018/04/13 21:56:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000deaff6)='numa_maps\x00') pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f00000f9000)=[{&(0x7f00009fb079)=""/4096, 0x1000}], 0x1) 2018/04/13 21:56:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0)="a69fa503", 0x4) 2018/04/13 21:56:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x24, 0x1d, 0x513, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1}]}, 0x14e}, 0x1}, 0x0) 2018/04/13 21:56:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) 2018/04/13 21:56:55 executing program 6: seccomp(0x0, 0x0, &(0x7f0000000ff0)={0x8c}) r0 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x410040, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @rand_addr}, &(0x7f00000001c0)=0xc) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4096, 0x39}, {&(0x7f00000000c0)=""/4}, {&(0x7f0000000140)=""/71}], 0x305, 0x0) recvfrom(r1, &(0x7f0000000200)=""/164, 0xa4, 0x0, &(0x7f00000002c0)=@ll={0x11, 0x1f, r2, 0x1, 0x1ff, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) 2018/04/13 21:56:55 executing program 7: munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002740)={@loopback={0x0, 0x1}}, 0xff62) 2018/04/13 21:56:55 executing program 7: munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002740)={@loopback={0x0, 0x1}}, 0xff62) 2018/04/13 21:56:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f017000660f23790f18f90f0d7df301e5e28e0f01cf0f1ba316842e65666c0f0119", 0x22}], 0x1, 0x0, &(0x7f00000001c0), 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgsnd(0x0, &(0x7f0000000000)={0x0, "b5f7"}, 0xa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:56:55 executing program 7: munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002740)={@loopback={0x0, 0x1}}, 0xff62) 2018/04/13 21:56:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x24, 0x1d, 0x513, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1}]}, 0x14e}, 0x1}, 0x0) 2018/04/13 21:56:55 executing program 0: syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000480)='./control\x00', 0x3, 0x2, &(0x7f0000000880)=[{&(0x7f00000004c0)="8bf6f8b342694889c7fda4981ee727175db1efb67140f6ab7431434872eacdcd2be9172ef62a43a4eb4947cff3dbd749f95cd8093c99ccda0ee12be6c68651f41297bb33c99e880acc4b0880964bc8e761ca75b1c6cba019f5fedc68b4ed5cff966e861fc7f867d0c7cf624e49d8a5825c44049e1e35f83e61b13ec5f8c31a78d1eb3509ec13a6", 0x87, 0x7}, {&(0x7f0000000740)="8715ad42c570", 0x6, 0xdeea}], 0x1000, &(0x7f0000000580)=ANY=[]) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x14) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x68f7, 0x40000) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x400) r2 = accept4$packet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/113, 0x71}], 0x3, &(0x7f00000002c0)=""/3, 0x3, 0x7ff}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nr0\x00', r3}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/147, 0xfffffd24}], 0x1, &(0x7f00000003c0)=""/23, 0x17, 0x6}, 0x101) mkdir(&(0x7f000031bff8)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=""/176, 0xb0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\x00'}, &(0x7f000054afec)="0200000001000006009707008200000000000000", 0x14, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./control\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x90) 2018/04/13 21:56:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) 2018/04/13 21:56:55 executing program 6: seccomp(0x0, 0x0, &(0x7f0000000ff0)={0x8c}) r0 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x410040, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @rand_addr}, &(0x7f00000001c0)=0xc) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4096, 0x39}, {&(0x7f00000000c0)=""/4}, {&(0x7f0000000140)=""/71}], 0x305, 0x0) recvfrom(r1, &(0x7f0000000200)=""/164, 0xa4, 0x0, &(0x7f00000002c0)=@ll={0x11, 0x1f, r2, 0x1, 0x1ff, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) 2018/04/13 21:56:55 executing program 7: munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002740)={@loopback={0x0, 0x1}}, 0xff62) 2018/04/13 21:56:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000deaff6)='numa_maps\x00') pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f00000f9000)=[{&(0x7f00009fb079)=""/4096, 0x1000}], 0x1) 2018/04/13 21:56:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x81, 0x0, 0x0, 0x0, @msi={0x5, 0xdd5e, 0x9}}, {0x7f, 0x3, 0x0, 0x0, @msi={0xb77, 0x80000001, 0x1c0000000000000}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x6, 0x7ff, 0x1}}]}) 2018/04/13 21:56:55 executing program 6: seccomp(0x0, 0x0, &(0x7f0000000ff0)={0x8c}) r0 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x410040, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @rand_addr}, &(0x7f00000001c0)=0xc) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4096, 0x39}, {&(0x7f00000000c0)=""/4}, {&(0x7f0000000140)=""/71}], 0x305, 0x0) recvfrom(r1, &(0x7f0000000200)=""/164, 0xa4, 0x0, &(0x7f00000002c0)=@ll={0x11, 0x1f, r2, 0x1, 0x1ff, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) 2018/04/13 21:56:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xa, &(0x7f0000001000), 0x0) 2018/04/13 21:56:56 executing program 1: socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000000)) 2018/04/13 21:56:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xa, &(0x7f0000001000), 0x0) [ 575.557274] IPVS: ftp: loaded support on port[0] = 21 2018/04/13 21:56:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x24, 0x1d, 0x513, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1}]}, 0x14e}, 0x1}, 0x0) 2018/04/13 21:56:56 executing program 6: seccomp(0x0, 0x0, &(0x7f0000000ff0)={0x8c}) r0 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x410040, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @rand_addr}, &(0x7f00000001c0)=0xc) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4096, 0x39}, {&(0x7f00000000c0)=""/4}, {&(0x7f0000000140)=""/71}], 0x305, 0x0) recvfrom(r1, &(0x7f0000000200)=""/164, 0xa4, 0x0, &(0x7f00000002c0)=@ll={0x11, 0x1f, r2, 0x1, 0x1ff, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) 2018/04/13 21:56:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xa, &(0x7f0000001000), 0x0) [ 575.751594] IPVS: You probably need to specify IP address on multicast interface. [ 575.759772] IPVS: Error connecting to the multicast addr [ 575.799949] IPVS: ftp: loaded support on port[0] = 21 2018/04/13 21:56:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f017000660f23790f18f90f0d7df301e5e28e0f01cf0f1ba316842e65666c0f0119", 0x22}], 0x1, 0x0, &(0x7f00000001c0), 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgsnd(0x0, &(0x7f0000000000)={0x0, "b5f7"}, 0xa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:56:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xa, &(0x7f0000001000), 0x0) 2018/04/13 21:56:56 executing program 1: socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000000)) 2018/04/13 21:56:56 executing program 6: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) 2018/04/13 21:56:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x24, 0x1d, 0x513, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1}]}, 0x14e}, 0x1}, 0x0) 2018/04/13 21:56:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7eabbcebd1dd850715284a9fd69bf6bfde5cfb085c385724baacf1a2865d221d2", 0xa0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:56:56 executing program 0: syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000480)='./control\x00', 0x3, 0x2, &(0x7f0000000880)=[{&(0x7f00000004c0)="8bf6f8b342694889c7fda4981ee727175db1efb67140f6ab7431434872eacdcd2be9172ef62a43a4eb4947cff3dbd749f95cd8093c99ccda0ee12be6c68651f41297bb33c99e880acc4b0880964bc8e761ca75b1c6cba019f5fedc68b4ed5cff966e861fc7f867d0c7cf624e49d8a5825c44049e1e35f83e61b13ec5f8c31a78d1eb3509ec13a6", 0x87, 0x7}, {&(0x7f0000000740)="8715ad42c570", 0x6, 0xdeea}], 0x1000, &(0x7f0000000580)=ANY=[]) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x14) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x68f7, 0x40000) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x400) r2 = accept4$packet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/113, 0x71}], 0x3, &(0x7f00000002c0)=""/3, 0x3, 0x7ff}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nr0\x00', r3}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/147, 0xfffffd24}], 0x1, &(0x7f00000003c0)=""/23, 0x17, 0x6}, 0x101) mkdir(&(0x7f000031bff8)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=""/176, 0xb0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\x00'}, &(0x7f000054afec)="0200000001000006009707008200000000000000", 0x14, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./control\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x90) 2018/04/13 21:56:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000a5def4)={{0xb, 0x0, 0x0, 0x0, "1b4d3cbde8f58d90018924940c3317f72fd20a070a115c4a1dbe9fd9421f2bde5ac7296e7e4d6ace88736a65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "e1d11b93206e214bb305376205292044a4eae3d1849ba4f663070b9af44b523aa0e85d3d904c0aada313c6228e9e94723904b3f9cc8ad27895951cf255a21d2c", &(0x7f0000a87ffe)='&\x00', 0x2}) [ 575.827409] IPVS: You probably need to specify IP address on multicast interface. [ 575.835221] IPVS: Error connecting to the multicast addr 2018/04/13 21:56:56 executing program 7: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) 2018/04/13 21:56:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000a5def4)={{0xb, 0x0, 0x0, 0x0, "1b4d3cbde8f58d90018924940c3317f72fd20a070a115c4a1dbe9fd9421f2bde5ac7296e7e4d6ace88736a65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "e1d11b93206e214bb305376205292044a4eae3d1849ba4f663070b9af44b523aa0e85d3d904c0aada313c6228e9e94723904b3f9cc8ad27895951cf255a21d2c", &(0x7f0000a87ffe)='&\x00', 0x2}) 2018/04/13 21:56:56 executing program 7: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) [ 576.145371] IPVS: ftp: loaded support on port[0] = 21 2018/04/13 21:56:56 executing program 1: socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000000)) 2018/04/13 21:56:56 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x90f) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000000)="83", 0x1}], 0x1) [ 576.429113] IPVS: You probably need to specify IP address on multicast interface. [ 576.446862] IPVS: Error connecting to the multicast addr 2018/04/13 21:56:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f017000660f23790f18f90f0d7df301e5e28e0f01cf0f1ba316842e65666c0f0119", 0x22}], 0x1, 0x0, &(0x7f00000001c0), 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgsnd(0x0, &(0x7f0000000000)={0x0, "b5f7"}, 0xa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:56:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000a5def4)={{0xb, 0x0, 0x0, 0x0, "1b4d3cbde8f58d90018924940c3317f72fd20a070a115c4a1dbe9fd9421f2bde5ac7296e7e4d6ace88736a65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "e1d11b93206e214bb305376205292044a4eae3d1849ba4f663070b9af44b523aa0e85d3d904c0aada313c6228e9e94723904b3f9cc8ad27895951cf255a21d2c", &(0x7f0000a87ffe)='&\x00', 0x2}) 2018/04/13 21:56:57 executing program 7: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) 2018/04/13 21:56:57 executing program 1: socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000000)) 2018/04/13 21:56:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7eabbcebd1dd850715284a9fd69bf6bfde5cfb085c385724baacf1a2865d221d2", 0xa0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:56:57 executing program 6: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) 2018/04/13 21:56:57 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x90f) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000000)="83", 0x1}], 0x1) 2018/04/13 21:56:57 executing program 0: syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000480)='./control\x00', 0x3, 0x2, &(0x7f0000000880)=[{&(0x7f00000004c0)="8bf6f8b342694889c7fda4981ee727175db1efb67140f6ab7431434872eacdcd2be9172ef62a43a4eb4947cff3dbd749f95cd8093c99ccda0ee12be6c68651f41297bb33c99e880acc4b0880964bc8e761ca75b1c6cba019f5fedc68b4ed5cff966e861fc7f867d0c7cf624e49d8a5825c44049e1e35f83e61b13ec5f8c31a78d1eb3509ec13a6", 0x87, 0x7}, {&(0x7f0000000740)="8715ad42c570", 0x6, 0xdeea}], 0x1000, &(0x7f0000000580)=ANY=[]) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x14) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x68f7, 0x40000) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x400) r2 = accept4$packet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/113, 0x71}], 0x3, &(0x7f00000002c0)=""/3, 0x3, 0x7ff}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nr0\x00', r3}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/147, 0xfffffd24}], 0x1, &(0x7f00000003c0)=""/23, 0x17, 0x6}, 0x101) mkdir(&(0x7f000031bff8)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=""/176, 0xb0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\x00'}, &(0x7f000054afec)="0200000001000006009707008200000000000000", 0x14, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./control\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x90) 2018/04/13 21:56:57 executing program 7: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) [ 577.443782] IPVS: ftp: loaded support on port[0] = 21 [ 577.625301] IPVS: You probably need to specify IP address on multicast interface. [ 577.634345] IPVS: Error connecting to the multicast addr 2018/04/13 21:56:58 executing program 0: syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000480)='./control\x00', 0x3, 0x2, &(0x7f0000000880)=[{&(0x7f00000004c0)="8bf6f8b342694889c7fda4981ee727175db1efb67140f6ab7431434872eacdcd2be9172ef62a43a4eb4947cff3dbd749f95cd8093c99ccda0ee12be6c68651f41297bb33c99e880acc4b0880964bc8e761ca75b1c6cba019f5fedc68b4ed5cff966e861fc7f867d0c7cf624e49d8a5825c44049e1e35f83e61b13ec5f8c31a78d1eb3509ec13a6", 0x87, 0x7}, {&(0x7f0000000740)="8715ad42c570", 0x6, 0xdeea}], 0x1000, &(0x7f0000000580)=ANY=[]) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x14) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x68f7, 0x40000) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x400) r2 = accept4$packet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/113, 0x71}], 0x3, &(0x7f00000002c0)=""/3, 0x3, 0x7ff}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nr0\x00', r3}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'sit0\x00'}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/147, 0xfffffd24}], 0x1, &(0x7f00000003c0)=""/23, 0x17, 0x6}, 0x101) mkdir(&(0x7f000031bff8)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=""/176, 0xb0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\x00'}, &(0x7f000054afec)="0200000001000006009707008200000000000000", 0x14, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./control\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x90) 2018/04/13 21:56:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7eabbcebd1dd850715284a9fd69bf6bfde5cfb085c385724baacf1a2865d221d2", 0xa0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:56:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000a5def4)={{0xb, 0x0, 0x0, 0x0, "1b4d3cbde8f58d90018924940c3317f72fd20a070a115c4a1dbe9fd9421f2bde5ac7296e7e4d6ace88736a65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "e1d11b93206e214bb305376205292044a4eae3d1849ba4f663070b9af44b523aa0e85d3d904c0aada313c6228e9e94723904b3f9cc8ad27895951cf255a21d2c", &(0x7f0000a87ffe)='&\x00', 0x2}) 2018/04/13 21:56:58 executing program 7: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) 2018/04/13 21:56:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f017000660f23790f18f90f0d7df301e5e28e0f01cf0f1ba316842e65666c0f0119", 0x22}], 0x1, 0x0, &(0x7f00000001c0), 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgsnd(0x0, &(0x7f0000000000)={0x0, "b5f7"}, 0xa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:56:58 executing program 6: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) 2018/04/13 21:56:58 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x90f) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000000)="83", 0x1}], 0x1) 2018/04/13 21:56:58 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x7, 0x4}]}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000080)) 2018/04/13 21:56:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 578.401646] IPVS: ftp: loaded support on port[0] = 21 2018/04/13 21:56:59 executing program 7: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) 2018/04/13 21:56:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x0, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xbc) 2018/04/13 21:56:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7eabbcebd1dd850715284a9fd69bf6bfde5cfb085c385724baacf1a2865d221d2", 0xa0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:56:59 executing program 6: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) 2018/04/13 21:56:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/13 21:56:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x0) 2018/04/13 21:56:59 executing program 7: unshare(0x20000400) clone(0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000400)) prctl$intptr(0x24, 0x6) [ 578.872011] IPVS: You probably need to specify IP address on multicast interface. [ 578.891357] IPVS: Error connecting to the multicast addr 2018/04/13 21:56:59 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x90f) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000000)="83", 0x1}], 0x1) 2018/04/13 21:56:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x0, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xbc) 2018/04/13 21:56:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/13 21:56:59 executing program 5: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:56:59 executing program 6: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/13 21:56:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 2018/04/13 21:56:59 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 21:56:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, &(0x7f00000002c0)) 2018/04/13 21:57:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/13 21:57:00 executing program 7: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000040)=0x88) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, &(0x7f00000002c0)) 2018/04/13 21:57:00 executing program 5: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:57:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x0, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xbc) 2018/04/13 21:57:00 executing program 6: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/13 21:57:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 2018/04/13 21:57:00 executing program 1: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:57:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, &(0x7f00000002c0)) 2018/04/13 21:57:00 executing program 7: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000040)=0x88) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:00 executing program 1: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:57:00 executing program 6: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/13 21:57:00 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 2018/04/13 21:57:00 executing program 5: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:57:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x0, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xbc) 2018/04/13 21:57:01 executing program 5: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:57:01 executing program 2: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa5d, 0x8000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x0) r0 = userfaultfd(0xfffffffffffffffc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000380)) close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x1, 0x20, 0x0, {r5, r6/1000+30000}, {}, {0x3, 0xff, 0x7fff, 0x7ff}, 0x1, @canfd={{0x3, 0x1000, 0x0, 0xffffffffffffff29}, 0x2, 0x2, 0x0, 0x0, "026034a07db1a3a6401d52e3e07efd3da1125522268b6f28f2ba2a41e18a8a08ba3106a18fcd1359fd26c8f979502ae3c453c78494849cd7a86f2cbb444fbb43"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x8]) 2018/04/13 21:57:01 executing program 6: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/13 21:57:01 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, &(0x7f00000002c0)) 2018/04/13 21:57:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 2018/04/13 21:57:01 executing program 1: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x401c, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 2018/04/13 21:57:01 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:01 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:01 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:01 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) 2018/04/13 21:57:01 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:01 executing program 7: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000040)=0x88) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:01 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='ifb0\x00'}) 2018/04/13 21:57:01 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000000040)="d3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0xc5ba, [], 0xaa}, 0x9}, 0x1c) 2018/04/13 21:57:01 executing program 2: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa5d, 0x8000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x0) r0 = userfaultfd(0xfffffffffffffffc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000380)) close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x1, 0x20, 0x0, {r5, r6/1000+30000}, {}, {0x3, 0xff, 0x7fff, 0x7ff}, 0x1, @canfd={{0x3, 0x1000, 0x0, 0xffffffffffffff29}, 0x2, 0x2, 0x0, 0x0, "026034a07db1a3a6401d52e3e07efd3da1125522268b6f28f2ba2a41e18a8a08ba3106a18fcd1359fd26c8f979502ae3c453c78494849cd7a86f2cbb444fbb43"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x8]) 2018/04/13 21:57:02 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="6df18deea3724e4324c3b9ca3a75b53d2d4d0e27b46709a644a896620db4b8bdf4dace768f270954a1946ba76d86bea972f197e018455d32ac18", 0x3a, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x46, 0x3a, &(0x7f00000003c0)="f0fda98cd87d0cf74ce97b4312cb7e63bb1bdcb5a53ca32da6d7b41fbaad9ee7c9f37d610d091ca9fc74852955bd78ceaf13dc5c2a9eff76fff58b304f99005483d86941476a", &(0x7f0000000440)=""/58, 0x6f9d, 0x8}, 0x28) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f00000002c0)={0x8, 0x9, 0x100000000, 0x81, 0x1000, 0x7fff, 0x6, 0x81, 0xfffffffffffff001, 0x0, 0x10000, 0x2, 0xff, 0x6, 0x7ca, 0x8, 0x1, 0x0, 0xb26, 0x2a, 0x0, 0x81, 0x401, 0x5, 0x4, 0xc78c}) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x4400, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000580)={0xf000, 0x1000, 0x5, 0xffffffffffffff80, 0xfffffffffffffffa}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000000), 0x0) 2018/04/13 21:57:02 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='ifb0\x00'}) 2018/04/13 21:57:02 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:02 executing program 2: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa5d, 0x8000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x0) r0 = userfaultfd(0xfffffffffffffffc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000380)) close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x1, 0x20, 0x0, {r5, r6/1000+30000}, {}, {0x3, 0xff, 0x7fff, 0x7ff}, 0x1, @canfd={{0x3, 0x1000, 0x0, 0xffffffffffffff29}, 0x2, 0x2, 0x0, 0x0, "026034a07db1a3a6401d52e3e07efd3da1125522268b6f28f2ba2a41e18a8a08ba3106a18fcd1359fd26c8f979502ae3c453c78494849cd7a86f2cbb444fbb43"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x8]) 2018/04/13 21:57:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:02 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) [ 581.621941] syz-executor1 (32018) used greatest stack depth: 13480 bytes left 2018/04/13 21:57:02 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000000040)="d3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0xc5ba, [], 0xaa}, 0x9}, 0x1c) 2018/04/13 21:57:02 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:02 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:02 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='ifb0\x00'}) 2018/04/13 21:57:02 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:02 executing program 2: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa5d, 0x8000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x0) r0 = userfaultfd(0xfffffffffffffffc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000380)) close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x1, 0x20, 0x0, {r5, r6/1000+30000}, {}, {0x3, 0xff, 0x7fff, 0x7ff}, 0x1, @canfd={{0x3, 0x1000, 0x0, 0xffffffffffffff29}, 0x2, 0x2, 0x0, 0x0, "026034a07db1a3a6401d52e3e07efd3da1125522268b6f28f2ba2a41e18a8a08ba3106a18fcd1359fd26c8f979502ae3c453c78494849cd7a86f2cbb444fbb43"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x8]) 2018/04/13 21:57:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:02 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000000040)="d3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0xc5ba, [], 0xaa}, 0x9}, 0x1c) 2018/04/13 21:57:02 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:02 executing program 7: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000040)=0x88) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:02 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) 2018/04/13 21:57:02 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) 2018/04/13 21:57:02 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) 2018/04/13 21:57:03 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:03 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc3) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002fd0)=[{&(0x7f0000448fdc)=""/36, 0x24}], 0x1) 2018/04/13 21:57:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:03 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='ifb0\x00'}) 2018/04/13 21:57:03 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000000040)="d3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0xc5ba, [], 0xaa}, 0x9}, 0x1c) 2018/04/13 21:57:03 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:03 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) 2018/04/13 21:57:03 executing program 3: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000ca6000), &(0x7f0000ca6ffc)) 2018/04/13 21:57:03 executing program 0: r0 = socket$kcm(0x29, 0x802, 0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r1, &(0x7f0000000fbc)) 2018/04/13 21:57:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f0000e52ec0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80}}, {@in=@broadcast=0xffffffff, 0x0, 0x32}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/13 21:57:03 executing program 6: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}, {{@arp={@dev={0xac, 0x14, 0x14}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'eql\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/04/13 21:57:03 executing program 1: r0 = eventfd2(0x2, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/13 21:57:03 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) setuid(0x0) 2018/04/13 21:57:03 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:03 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) setuid(0x0) 2018/04/13 21:57:03 executing program 0: r0 = socket$kcm(0x29, 0x802, 0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r1, &(0x7f0000000fbc)) 2018/04/13 21:57:03 executing program 3: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000ca6000), &(0x7f0000ca6ffc)) 2018/04/13 21:57:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003baff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/13 21:57:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/13 21:57:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f0000e52ec0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80}}, {@in=@broadcast=0xffffffff, 0x0, 0x32}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/13 21:57:04 executing program 0: r0 = socket$kcm(0x29, 0x802, 0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r1, &(0x7f0000000fbc)) 2018/04/13 21:57:04 executing program 3: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000ca6000), &(0x7f0000ca6ffc)) 2018/04/13 21:57:04 executing program 6: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}, {{@arp={@dev={0xac, 0x14, 0x14}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'eql\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/04/13 21:57:04 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr}}, 0x1e) 2018/04/13 21:57:04 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) setuid(0x0) 2018/04/13 21:57:04 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) setuid(0x0) 2018/04/13 21:57:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f0000e52ec0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80}}, {@in=@broadcast=0xffffffff, 0x0, 0x32}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/13 21:57:04 executing program 3: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000ca6000), &(0x7f0000ca6ffc)) 2018/04/13 21:57:04 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f0000000040)) 2018/04/13 21:57:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="290000001400070002ffffffea08e0eb01c86ae2dfa4478b11370000c53951ce251893a338368f0fc5", 0x29) 2018/04/13 21:57:04 executing program 6: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}, {{@arp={@dev={0xac, 0x14, 0x14}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'eql\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/04/13 21:57:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0x800000f}, 0x2c) 2018/04/13 21:57:04 executing program 0: r0 = socket$kcm(0x29, 0x802, 0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r1, &(0x7f0000000fbc)) 2018/04/13 21:57:05 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000002580)='user\x00', &(0x7f0000002680)={0x73, 0x79, 0x7a}, &(0x7f00000026c0)="d7", 0x1, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 2018/04/13 21:57:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) 2018/04/13 21:57:05 executing program 3: clone(0x200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000300)) r0 = gettid() openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x64640, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='attr/current\x00') write(r1, &(0x7f0000000140), 0x40010020) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) 2018/04/13 21:57:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f0000e52ec0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80}}, {@in=@broadcast=0xffffffff, 0x0, 0x32}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/13 21:57:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f0000000040)) 2018/04/13 21:57:05 executing program 6: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}, {{@arp={@dev={0xac, 0x14, 0x14}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'eql\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/04/13 21:57:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0x800000f}, 0x2c) 2018/04/13 21:57:05 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="2467cecf8eb1ab923e736b24f8b72cce31345d6c26464b0034641aad5d1d7ea8bc35541fa2dc8297ddb71df3da169a3e406ccaca961e285ebcd9a4e5476c04759a8548e64cbb4a8b2590d9cdbce7dcf51bb752dbf85e31ab083e1621d5a4d7e9e30bea0e9e8032cc40105bc1c99a4a4e520f4b62203c1c112514c75707ec47410b3e86425508e7e8141996caf390bb9bc361a3dfa05a464d39c39856f26877da1487d60e0706b1a024d88c59e608d7b0c8abae0d60303a6f83cc0cc6e99019e37900029f396be57e55fc4a40100e88c4ce8764cf2b90fbe00abf8bdd487de560ecddd3b2c541fa0856fc43683cea25d4c0e4d457480bcf09206c45a297db52e3b1fa963f0ef88f419af29cbcc1270f9f12306f9c94f38c4e8c8d2b00122e20aa8f238b9e58e85ddef20b821734f5759db670721807c8671dbec1afa168ac3502643e7e6fd12f61e66ff5adb65e2e248d6f5158defad2611f59008dc585002326b4dc2266de0de283e5b858053d8f615dc41ac70671b0037a12bce803d4bdbb0b1f080e1fee4ed513846df808a0ccfc8c27b7df61cfc2293c482ad7e5940a8e65d4b86b2f0978bbbdccd2cb32febb2e4cfae4eb096a5675c2a92b39fa7c703c15c814a3182dc4ad2d9d551c104a85c029ed5e9284a9085d633433f76ddd5f03f107dc399a7e7c7c16e686f51ed4b4124a433f56596d38c2f8c2", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 2018/04/13 21:57:05 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000002580)='user\x00', &(0x7f0000002680)={0x73, 0x79, 0x7a}, &(0x7f00000026c0)="d7", 0x1, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 2018/04/13 21:57:05 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)={[0x36]}, 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x1) 2018/04/13 21:57:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="a6d542d766ff62a804d491ba4ac31c41c24e68a925613d3effe52a114a59dd9e7231d35aa158b6fa6f0647e6ea30b3fe0a648490ecc7a4dea549dab678c3414a5f7ef4fbcba9f3bbc19d2a94794ab4a99bf376ab09cfb6a4", 0x58}], 0x1, &(0x7f00000001c0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/13 21:57:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f0000000040)) 2018/04/13 21:57:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0x800000f}, 0x2c) 2018/04/13 21:57:06 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:06 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f0000000040)) 2018/04/13 21:57:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)={[0x36]}, 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x1) 2018/04/13 21:57:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000002580)='user\x00', &(0x7f0000002680)={0x73, 0x79, 0x7a}, &(0x7f00000026c0)="d7", 0x1, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 2018/04/13 21:57:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="a6d542d766ff62a804d491ba4ac31c41c24e68a925613d3effe52a114a59dd9e7231d35aa158b6fa6f0647e6ea30b3fe0a648490ecc7a4dea549dab678c3414a5f7ef4fbcba9f3bbc19d2a94794ab4a99bf376ab09cfb6a4", 0x58}], 0x1, &(0x7f00000001c0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/13 21:57:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 2018/04/13 21:57:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0x800000f}, 0x2c) 2018/04/13 21:57:06 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)={[0x36]}, 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x1) 2018/04/13 21:57:06 executing program 7: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000002580)='user\x00', &(0x7f0000002680)={0x73, 0x79, 0x7a}, &(0x7f00000026c0)="d7", 0x1, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 2018/04/13 21:57:06 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 2018/04/13 21:57:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="a6d542d766ff62a804d491ba4ac31c41c24e68a925613d3effe52a114a59dd9e7231d35aa158b6fa6f0647e6ea30b3fe0a648490ecc7a4dea549dab678c3414a5f7ef4fbcba9f3bbc19d2a94794ab4a99bf376ab09cfb6a4", 0x58}], 0x1, &(0x7f00000001c0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/13 21:57:06 executing program 7: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)={[0x36]}, 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x1) 2018/04/13 21:57:06 executing program 2: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 2018/04/13 21:57:06 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:07 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) sendfile(r0, r0, &(0x7f0000000200), 0x9) fdatasync(r0) fallocate(r0, 0x11, 0x0, 0x8000) 2018/04/13 21:57:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="a6d542d766ff62a804d491ba4ac31c41c24e68a925613d3effe52a114a59dd9e7231d35aa158b6fa6f0647e6ea30b3fe0a648490ecc7a4dea549dab678c3414a5f7ef4fbcba9f3bbc19d2a94794ab4a99bf376ab09cfb6a4", 0x58}], 0x1, &(0x7f00000001c0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/13 21:57:07 executing program 7: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:07 executing program 1: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:07 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="251fa337831a999d", 0x8, r1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x6, 0x8001) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000280)={0x400, 0x5}) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) clock_gettime(0x3, &(0x7f0000000040)) keyctl$update(0x2, r5, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r5, r2}, &(0x7f0000a53ffb)=""/5, 0x18, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crc32c-generic\x00'}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xe6, 0x1, [0x4]}, &(0x7f0000000440)=0xa) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000580)={r7, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x84) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) mq_notify(r6, &(0x7f0000000200)={0x0, 0x3, 0x4, @tid=r8}) 2018/04/13 21:57:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x1, 0x0, &(0x7f00000003c0)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000100)}) 2018/04/13 21:57:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c700000000000000000300050000000000020000000000000000000000000000000800120002000103000000000000000010000000030300000000000000020000000000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/04/13 21:57:07 executing program 2: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x4043) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) 2018/04/13 21:57:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c700000000000000000300050000000000020000000000000000000000000000000800120002000103000000000000000010000000030300000000000000020000000000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/04/13 21:57:07 executing program 7: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:07 executing program 1: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:07 executing program 2: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x1}, {}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/13 21:57:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c700000000000000000300050000000000020000000000000000000000000000000800120002000103000000000000000010000000030300000000000000020000000000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/04/13 21:57:07 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="251fa337831a999d", 0x8, r1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x6, 0x8001) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000280)={0x400, 0x5}) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) clock_gettime(0x3, &(0x7f0000000040)) keyctl$update(0x2, r5, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r5, r2}, &(0x7f0000a53ffb)=""/5, 0x18, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crc32c-generic\x00'}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xe6, 0x1, [0x4]}, &(0x7f0000000440)=0xa) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000580)={r7, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x84) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) mq_notify(r6, &(0x7f0000000200)={0x0, 0x3, 0x4, @tid=r8}) [ 587.595376] binder: 32297 RLIMIT_NICE not set [ 587.599987] binder: 32297 RLIMIT_NICE not set [ 587.609533] binder: 32297 RLIMIT_NICE not set [ 587.615996] binder: BINDER_SET_CONTEXT_MGR already set [ 587.621374] binder: 32272:32297 ioctl 40046207 0 returned -16 [ 587.628522] binder: 32297 RLIMIT_NICE not set [ 587.628543] binder_alloc: 32272: binder_alloc_buf, no vma 2018/04/13 21:57:08 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c700000000000000000300050000000000020000000000000000000000000000000800120002000103000000000000000010000000030300000000000000020000000000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/04/13 21:57:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x4043) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) 2018/04/13 21:57:08 executing program 1: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:08 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="251fa337831a999d", 0x8, r1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x6, 0x8001) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000280)={0x400, 0x5}) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) clock_gettime(0x3, &(0x7f0000000040)) keyctl$update(0x2, r5, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r5, r2}, &(0x7f0000a53ffb)=""/5, 0x18, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crc32c-generic\x00'}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xe6, 0x1, [0x4]}, &(0x7f0000000440)=0xa) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000580)={r7, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x84) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) mq_notify(r6, &(0x7f0000000200)={0x0, 0x3, 0x4, @tid=r8}) 2018/04/13 21:57:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:08 executing program 2: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) [ 587.638673] binder: 32272:32278 transaction failed 29189/-3, size 0-0 line 2963 [ 587.665423] binder: undelivered TRANSACTION_COMPLETE 2018/04/13 21:57:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="d200000000000000024d564b0000000001"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f20d835200000000f22d8c442cd8c79a12e664499440f01ca65df5a0066416c660f383d0a66420f38048b0200000040c05299e566f30f8005000000", 0x3c}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:08 executing program 2: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:08 executing program 1: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:08 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="251fa337831a999d", 0x8, r1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x6, 0x8001) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000280)={0x400, 0x5}) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) clock_gettime(0x3, &(0x7f0000000040)) keyctl$update(0x2, r5, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r5, r2}, &(0x7f0000a53ffb)=""/5, 0x18, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crc32c-generic\x00'}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xe6, 0x1, [0x4]}, &(0x7f0000000440)=0xa) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000580)={r7, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x84) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) mq_notify(r6, &(0x7f0000000200)={0x0, 0x3, 0x4, @tid=r8}) 2018/04/13 21:57:08 executing program 2: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) poll(&(0x7f0000000100)=[{r1}, {r3}, {r0}], 0x3, 0x200) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x3, 0x3, 0x40, 0x0, 0x2, 0x3c442609c82038ad, 0x0, 0xb7f, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x8138, 0x2, 0x6, 0x7, 0x1, 0x1, 0x7fffffff, 0x9, 0x100000000, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x80, 0xfffffffffffffffc, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xe9f, 0x2524, 0x3, 0x8, 0x81, 0x145}, r2, 0x8, r2, 0x9) 2018/04/13 21:57:08 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x813, r0, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 21:57:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x4043) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) 2018/04/13 21:57:08 executing program 2: r0 = socket$inet(0x2, 0x8000000000003, 0x32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c650000000000003d22bb000000e2ccf405bd9e5d690de64c09196200001900000000000000000000000000001f0000000600000068050000f8010000e8000000f8010000e800000000000000d0040000d0"], 0x1) 2018/04/13 21:57:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:09 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x813, r0, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 21:57:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="d200000000000000024d564b0000000001"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f20d835200000000f22d8c442cd8c79a12e664499440f01ca65df5a0066416c660f383d0a66420f38048b0200000040c05299e566f30f8005000000", 0x3c}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:09 executing program 2: r0 = socket$inet(0x2, 0x8000000000003, 0x32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c650000000000003d22bb000000e2ccf405bd9e5d690de64c09196200001900000000000000000000000000001f0000000600000068050000f8010000e8000000f8010000e800000000000000d0040000d0"], 0x1) 2018/04/13 21:57:09 executing program 6: bind(0xffffffffffffffff, &(0x7f0000001fd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback=0x7f000001}, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x4043) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) 2018/04/13 21:57:09 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:09 executing program 2: r0 = socket$inet(0x2, 0x8000000000003, 0x32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c650000000000003d22bb000000e2ccf405bd9e5d690de64c09196200001900000000000000000000000000001f0000000600000068050000f8010000e8000000f8010000e800000000000000d0040000d0"], 0x1) 2018/04/13 21:57:09 executing program 6: bind(0xffffffffffffffff, &(0x7f0000001fd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback=0x7f000001}, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:09 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x813, r0, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 21:57:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000), 0x4) 2018/04/13 21:57:09 executing program 2: r0 = socket$inet(0x2, 0x8000000000003, 0x32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c650000000000003d22bb000000e2ccf405bd9e5d690de64c09196200001900000000000000000000000000001f0000000600000068050000f8010000e8000000f8010000e800000000000000d0040000d0"], 0x1) 2018/04/13 21:57:09 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x813, r0, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 21:57:09 executing program 6: bind(0xffffffffffffffff, &(0x7f0000001fd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback=0x7f000001}, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000), 0x4) 2018/04/13 21:57:10 executing program 6: bind(0xffffffffffffffff, &(0x7f0000001fd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback=0x7f000001}, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="d200000000000000024d564b0000000001"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f20d835200000000f22d8c442cd8c79a12e664499440f01ca65df5a0066416c660f383d0a66420f38048b0200000040c05299e566f30f8005000000", 0x3c}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:10 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/13 21:57:10 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000580)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) 2018/04/13 21:57:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000), 0x4) 2018/04/13 21:57:10 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="d200000000000000024d564b0000000001"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f20d835200000000f22d8c442cd8c79a12e664499440f01ca65df5a0066416c660f383d0a66420f38048b0200000040c05299e566f30f8005000000", 0x3c}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000), 0x4) 2018/04/13 21:57:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid}]}, 0x1c}, 0x1}, 0x0) [ 589.973814] binder: BINDER_SET_CONTEXT_MGR already set [ 589.979364] binder: 32394:32399 ioctl 40046207 0 returned -16 [ 589.997051] binder_alloc: 32394: binder_alloc_buf, no vma [ 590.002771] binder: 32394:32397 transaction failed 29189/-3, size 40-8 line 2963 [ 590.075547] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.091382] binder: release 32394:32397 transaction 203 out, still active [ 590.098457] binder: unexpected work type, 4, not freed [ 590.103788] binder: undelivered TRANSACTION_COMPLETE [ 590.108975] binder: send failed reply for transaction 203, target dead 2018/04/13 21:57:11 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000580)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) 2018/04/13 21:57:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x0, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 2018/04/13 21:57:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000100)='./file0\x00') geteuid() r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, &(0x7f0000000800)='(user\x00', 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000880)=""/75, 0x4b) 2018/04/13 21:57:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f000067f000), 0x3) 2018/04/13 21:57:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) 2018/04/13 21:57:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000100)='./file0\x00') geteuid() r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, &(0x7f0000000800)='(user\x00', 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000880)=""/75, 0x4b) 2018/04/13 21:57:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f000067f000), 0x3) 2018/04/13 21:57:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00001aa000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x8, 0xa1bf}) 2018/04/13 21:57:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 2018/04/13 21:57:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000100)='./file0\x00') geteuid() r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, &(0x7f0000000800)='(user\x00', 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000880)=""/75, 0x4b) 2018/04/13 21:57:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000580)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) 2018/04/13 21:57:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x0, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x4}]}, 0xa0}, 0x1}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f000067f000), 0x3) [ 590.909280] binder: release 32414:32421 transaction 208 out, still active [ 590.916377] binder: unexpected work type, 4, not freed [ 590.921717] binder: undelivered TRANSACTION_COMPLETE [ 590.926900] binder: send failed reply for transaction 208, target dead 2018/04/13 21:57:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) 2018/04/13 21:57:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) 2018/04/13 21:57:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000100)='./file0\x00') geteuid() r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, &(0x7f0000000800)='(user\x00', 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000880)=""/75, 0x4b) 2018/04/13 21:57:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x0, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 2018/04/13 21:57:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) 2018/04/13 21:57:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000580)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) 2018/04/13 21:57:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f000067f000), 0x3) 2018/04/13 21:57:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x4}]}, 0xa0}, 0x1}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) [ 591.242990] binder: release 32443:32447 transaction 212 out, still active [ 591.250072] binder: unexpected work type, 4, not freed [ 591.255400] binder: undelivered TRANSACTION_COMPLETE [ 591.260611] binder: send failed reply for transaction 212, target dead 2018/04/13 21:57:11 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000a22000), 0x4) 2018/04/13 21:57:12 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) 2018/04/13 21:57:12 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000a22000), 0x4) 2018/04/13 21:57:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x0, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000400)={0x0, 0x0, 0xfffffffffffffffe}) 2018/04/13 21:57:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)='user\x00') mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x4, 0x4d072, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x29b0, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {r4, r5+10000000}}, &(0x7f0000000140)) inotify_init1(0x800) 2018/04/13 21:57:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 2018/04/13 21:57:12 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='s'], &(0x7f0000000300)='jfs\x00', 0x4, 0x0) dup2(r1, r2) 2018/04/13 21:57:12 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000a22000), 0x4) [ 591.638506] binder: release 32457:32472 transaction 216 out, still active [ 591.645559] binder: unexpected work type, 4, not freed [ 591.650894] binder: undelivered TRANSACTION_COMPLETE [ 591.656087] binder: send failed reply for transaction 216, target dead 2018/04/13 21:57:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x49, 0x0, 0x1}]}) 2018/04/13 21:57:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000dceff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x9) 2018/04/13 21:57:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cb1000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80000089a3, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000040)}}) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x8, &(0x7f0000000440)) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/13 21:57:13 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='s'], &(0x7f0000000300)='jfs\x00', 0x4, 0x0) dup2(r1, r2) 2018/04/13 21:57:13 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000a22000), 0x4) 2018/04/13 21:57:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x4}]}, 0xa0}, 0x1}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:13 executing program 1: unshare(0x8000400) msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) unshare(0xc000000) 2018/04/13 21:57:13 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x806], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x543, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/13 21:57:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) [ 592.771685] unchecked MSR access error: WRMSR to 0x49 (tried to write 0x0000000000000001) at rIP: 0xffffffff8133edc8 (native_write_msr+0x8/0x30) [ 592.784885] Call Trace: [ 592.787543] vmx_set_msr+0xc14/0x1fb0 [ 592.791426] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.796503] ? __check_object_size+0x95/0x5d9 [ 592.801085] kvm_set_msr+0x18a/0x370 [ 592.804858] do_set_msr+0x106/0x190 [ 592.808567] ? do_get_msr+0x1d0/0x1d0 [ 592.812420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.818021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.823629] msr_io+0x21a/0x360 [ 592.826955] ? do_get_msr+0x1d0/0x1d0 [ 592.830797] ? copy_overflow+0x30/0x30 [ 592.834747] kvm_arch_vcpu_ioctl+0x14cb/0x36f0 [ 592.839374] ? kvm_arch_vcpu_ioctl+0x1479/0x36f0 [ 592.844194] ? kvm_arch_vcpu_put+0x420/0x420 [ 592.848651] ? __sched_text_start+0x8/0x8 [ 592.852870] ? plist_check_list+0x7e/0xa0 [ 592.857066] ? graph_lock+0x170/0x170 [ 592.860929] ? plist_check_list+0xa0/0xa0 [ 592.865119] ? wakeup_preempt_entity.isra.63+0x7b/0xb0 [ 592.870461] ? graph_lock+0x170/0x170 [ 592.874304] ? find_held_lock+0x36/0x1c0 [ 592.878462] ? lock_acquire+0x1dc/0x520 [ 592.882479] ? kvm_vcpu_ioctl+0x1e2/0x12e0 [ 592.886779] ? do_raw_spin_unlock+0x9e/0x2e0 [ 592.891242] ? lock_release+0xa10/0xa10 [ 592.895278] ? check_same_owner+0x320/0x320 [ 592.899657] ? rcu_note_context_switch+0x710/0x710 [ 592.904653] ? __might_sleep+0x95/0x190 [ 592.908675] ? kasan_check_write+0x14/0x20 [ 592.912985] ? __mutex_lock+0x7d9/0x17f0 [ 592.917110] ? kasan_check_write+0x14/0x20 [ 592.921403] ? do_raw_spin_lock+0xc1/0x200 [ 592.925675] ? kvm_vcpu_ioctl+0x1e2/0x12e0 [ 592.929966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.935556] ? print_usage_bug+0xc0/0xc0 [ 592.939672] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.944738] ? mutex_trylock+0x2a0/0x2a0 [ 592.950052] ? futex_wake+0x750/0x750 [ 592.953917] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 592.959174] ? __lock_acquire+0x7f5/0x5140 [ 592.963465] ? debug_check_no_locks_freed+0x310/0x310 [ 592.968718] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 592.973878] ? futex_wake+0x2f6/0x750 [ 592.977743] ? get_futex_key+0x1e90/0x1e90 [ 592.982010] ? find_held_lock+0x36/0x1c0 [ 592.986163] ? lock_downgrade+0x8e0/0x8e0 [ 592.990345] ? finish_task_switch+0x182/0x810 [ 592.994882] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 593.000113] ? do_futex+0x249/0x27d0 [ 593.003883] kvm_vcpu_ioctl+0x27e/0x12e0 [ 593.007972] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 593.013711] ? exit_robust_list+0x290/0x290 [ 593.018082] ? find_held_lock+0x36/0x1c0 [ 593.022179] ? lock_downgrade+0x8e0/0x8e0 [ 593.026368] ? kasan_check_read+0x11/0x20 [ 593.030539] ? rcu_is_watching+0x85/0x140 [ 593.034717] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 593.039938] ? __fget+0x40c/0x650 [ 593.043425] ? expand_files.part.8+0x9a0/0x9a0 [ 593.048045] ? trace_hardirqs_off+0xd/0x10 [ 593.052303] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 593.057461] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 593.062686] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 593.068416] do_vfs_ioctl+0x1cf/0x16a0 [ 593.072338] ? ioctl_preallocate+0x2e0/0x2e0 [ 593.076782] ? fget_raw+0x20/0x20 [ 593.080266] ? kmem_cache_free+0x25c/0x2d0 [ 593.084552] ? SyS_futex+0x3a4/0x56d [ 593.088292] ? exit_to_usermode_loop+0x87/0x310 [ 593.092993] ? do_futex+0x27d0/0x27d0 [ 593.096836] ? security_file_ioctl+0x94/0xc0 [ 593.101276] ksys_ioctl+0xa9/0xd0 [ 593.104775] SyS_ioctl+0x24/0x30 [ 593.108187] ? ksys_ioctl+0xd0/0xd0 [ 593.111840] do_syscall_64+0x29e/0x9d0 [ 593.115772] ? vmalloc_sync_all+0x30/0x30 [ 593.119948] ? _raw_spin_unlock_irq+0x27/0x70 [ 593.124473] ? finish_task_switch+0x1ca/0x810 [ 593.129018] ? syscall_return_slowpath+0x5c0/0x5c0 [ 593.133998] ? syscall_return_slowpath+0x30f/0x5c0 [ 593.138971] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 593.144368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.149243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 593.154457] RIP: 0033:0x455319 [ 593.157669] RSP: 002b:00007f5fb08d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.165428] RAX: ffffffffffffffda RBX: 00007f5fb08d26d4 RCX: 0000000000455319 [ 593.172738] RDX: 0000000020000080 RSI: 000000004008ae89 RDI: 0000000000000015 [ 593.180045] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 593.187349] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 593.194639] R13: 0000000000000263 R14: 00000000006f69e8 R15: 0000000000000000 2018/04/13 21:57:14 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x806], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x543, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/13 21:57:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000dceff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x9) 2018/04/13 21:57:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x4}]}, 0xa0}, 0x1}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:14 executing program 1: unshare(0x8000400) msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) unshare(0xc000000) 2018/04/13 21:57:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cb1000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80000089a3, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000040)}}) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x8, &(0x7f0000000440)) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/13 21:57:14 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='s'], &(0x7f0000000300)='jfs\x00', 0x4, 0x0) dup2(r1, r2) 2018/04/13 21:57:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x49, 0x0, 0x1}]}) 2018/04/13 21:57:14 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x806], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x543, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/13 21:57:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cb1000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80000089a3, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000040)}}) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x8, &(0x7f0000000440)) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/13 21:57:14 executing program 1: unshare(0x8000400) msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) unshare(0xc000000) 2018/04/13 21:57:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x49, 0x0, 0x1}]}) 2018/04/13 21:57:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000dceff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x9) 2018/04/13 21:57:14 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x806], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x543, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/13 21:57:14 executing program 1: unshare(0x8000400) msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) unshare(0xc000000) 2018/04/13 21:57:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cb1000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80000089a3, &(0x7f0000000080)={"6272696467653000e7ffffff00", @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000040)}}) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x8, &(0x7f0000000440)) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/13 21:57:14 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x49, 0x0, 0x1}]}) 2018/04/13 21:57:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000dceff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x9) 2018/04/13 21:57:14 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:15 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='s'], &(0x7f0000000300)='jfs\x00', 0x4, 0x0) dup2(r1, r2) 2018/04/13 21:57:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2018/04/13 21:57:15 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:15 executing program 3: r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/13 21:57:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000300fb8)={0x2, 0x3, &(0x7f00002a6000)=@framed={{0x18}, [], {0x95}}, &(0x7f00006c4ff6)='syzkaller\x00', 0x0, 0x90, &(0x7f0000dc5000)=""/144}, 0x48) 2018/04/13 21:57:15 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) 2018/04/13 21:57:15 executing program 1: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000) 2018/04/13 21:57:15 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)='R', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) [ 594.645136] binder: 32581:32583 ERROR: BC_REGISTER_LOOPER called without request 2018/04/13 21:57:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000300fb8)={0x2, 0x3, &(0x7f00002a6000)=@framed={{0x18}, [], {0x95}}, &(0x7f00006c4ff6)='syzkaller\x00', 0x0, 0x90, &(0x7f0000dc5000)=""/144}, 0x48) 2018/04/13 21:57:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 594.729561] binder: 32583 RLIMIT_NICE not set [ 594.735410] binder_alloc: binder_alloc_mmap_handler: 32578 20000000-20001000 already mapped failed -16 [ 594.758208] binder: 32583 RLIMIT_NICE not set 2018/04/13 21:57:15 executing program 3: r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/13 21:57:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000603000)) 2018/04/13 21:57:15 executing program 1: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000) [ 594.784119] binder: BINDER_SET_CONTEXT_MGR already set [ 594.812487] binder: 32581:32583 ioctl 40046207 0 returned -16 [ 594.863183] binder: 32581:32597 ERROR: BC_REGISTER_LOOPER called without request 2018/04/13 21:57:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000300fb8)={0x2, 0x3, &(0x7f00002a6000)=@framed={{0x18}, [], {0x95}}, &(0x7f00006c4ff6)='syzkaller\x00', 0x0, 0x90, &(0x7f0000dc5000)=""/144}, 0x48) 2018/04/13 21:57:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 594.985309] binder: release 32581:32583 transaction 220 in, still active [ 594.992309] binder: send failed reply for transaction 220 to 32581:32583 [ 595.020509] binder: undelivered TRANSACTION_COMPLETE [ 595.025751] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/13 21:57:16 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)='R', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/04/13 21:57:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000300fb8)={0x2, 0x3, &(0x7f00002a6000)=@framed={{0x18}, [], {0x95}}, &(0x7f00006c4ff6)='syzkaller\x00', 0x0, 0x90, &(0x7f0000dc5000)=""/144}, 0x48) 2018/04/13 21:57:16 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2018/04/13 21:57:16 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) mount(&(0x7f0000000000)='..', &(0x7f0000000080)='..', &(0x7f0000000180)='sysv\x00', 0x2000, 0x0) 2018/04/13 21:57:16 executing program 3: r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/13 21:57:16 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2018/04/13 21:57:16 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) 2018/04/13 21:57:16 executing program 1: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000) 2018/04/13 21:57:16 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)='R', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/04/13 21:57:16 executing program 3: r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/13 21:57:16 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 595.720851] binder: 32632:32641 ERROR: BC_REGISTER_LOOPER called without request 2018/04/13 21:57:16 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)='R', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/04/13 21:57:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x6}, 0x2c) 2018/04/13 21:57:16 executing program 1: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000) 2018/04/13 21:57:16 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) mount(&(0x7f0000000000)='..', &(0x7f0000000080)='..', &(0x7f0000000180)='sysv\x00', 0x2000, 0x0) 2018/04/13 21:57:16 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xcffd, 0x0, 0x200010001}) 2018/04/13 21:57:16 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2018/04/13 21:57:16 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) 2018/04/13 21:57:16 executing program 0: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) [ 595.772632] binder: 32641 RLIMIT_NICE not set [ 595.777279] binder: 32641 RLIMIT_NICE not set [ 595.792151] binder: release 32632:32641 transaction 222 in, still active [ 595.799072] binder: send failed reply for transaction 222 to 32632:32641 [ 595.806063] binder: undelivered TRANSACTION_COMPLETE [ 595.811235] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/13 21:57:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000008000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000000000000697064647030000000000000000000007663616e30000000000000000000000069705f7674693000000000000000000073797a6b616c6c6572310000000000000180c20000000000000000000180c2000000000000000000000070000000f000000040010000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000006772657461703000000000000000000065716c000000000000000000000000006966623000000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000070000000a0000000d8000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000001fce0b0bce0b00aced3e3152fc5b3f64049b6ff0d81edd4976662397c7045ccbd81cc2eed1d62966aee97f0eddce60c26561567164e0411be7ed90d7d414d08cceddfd077fb3ae9ae66f12206e9b0f5a5210dc040babd70e3e77f2873a4038f349498cea1f81d9da17a22022f6fcdc7e5c9e7f5e2f8cfdf1bb763a9010cc25e5afdb799fa7c72ca4b3c6de3536af37bf16ad7da6b9c674f7bb5cadfaf42c33e45e6668aa4b524c14d80015731658ddee60b733165311388a186c5869ac58d90cf242068f4c30eaf71cbb77492bf20c54d6f75"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/04/13 21:57:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000100)="0401000000e3cde82c46d64e498020c17ae638d830f6eb59598f3f959ebb99835091", 0x22, 0x0, &(0x7f0000000180)={0xa, 0x800, 0x2, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/13 21:57:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x6}, 0x2c) [ 595.964777] Disabled LAPIC found during irq injection 2018/04/13 21:57:16 executing program 2: socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000bd3000)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0x80) getuid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2825, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000000)=0x8) 2018/04/13 21:57:16 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) mount(&(0x7f0000000000)='..', &(0x7f0000000080)='..', &(0x7f0000000180)='sysv\x00', 0x2000, 0x0) [ 596.001903] binder: 32659:32660 ERROR: BC_REGISTER_LOOPER called without request [ 596.012360] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 596.051247] Disabled LAPIC found during irq injection [ 596.056073] binder: 32660 RLIMIT_NICE not set [ 596.073573] binder: 32660 RLIMIT_NICE not set 2018/04/13 21:57:16 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:16 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"8a927799b01a029f25061eda96dd379385fc78b28fcbf8eb8455a6fb67a8de46d4d40000a01a47191dc792f414ac8437036bb34b6632c980073c4cdc084a1966c440f15811d016f5b50e90810603f10a2c83eb8c062194269ab67e4bb4b3c5199cadd60d3f6fc72a7eb011b622072532229fbc9d9c4d1e045191ee2b0d584c8fd736ee3c7d73d5267b67a69251b1a8647e90692d30ecfb806326f17f0a7a24aa58b111193c88181907d958cb00807d63dfb58775215937ae2b62b46c6d5816f2fc52eeab0000000000000003252929e628ad2c34a0ef717fb2504d9bd66eabce002faf0512145c072f3087a5566c38fda729442c3ebd62e970a9a3eb242747993601a1a186b8376d39c69c4ce503b2638feeae79436a9708b3bb19f38377382ea7b4c9c2d674b80ef220109f8fa8200de4794547b4da6430ac512116d358949a298812c5d54017aa2fc8b814ecf28c41d4c83474ba93a8ad32b16371b42350bf984abb465228cfd848e54abc383d21d0a3315f1b8599efa1bf10bd30a1371757b13aed4a19db7c777995fd42ad446d9d2755f8ab97f7ff225f1386a8ee3ece9ded52625aa3f0a1d7b76b32536d39eeae158271064ea79bddf1032b6e6ac794f37ec9d0c3bc4923cc7b631c6df64f28d75d99443d6653db3c6b7961190e8f82a233000001002ce4f47168ef93f01aef51c60000000000000006af34b21ed8437a371c0b427cd8c94f3952ee752b758eb5bff60a0c4f4793cd6638a2a23d68cb6e86925599fbc1361b8ce27b41d79027894b6c0003cc97a64088edf383a51eef947915369bdd4fc3cded2663d17515838f8fbba284c5b6ffc5251019eaee59d117d34c73e50fbd33ceb4508cfa4eecb7d6bb11fc4a114a13542dee77b2651783f6a5d9260036ccc70d695105d1ddb56f1ac26584547d8d5cecb3c672068cc7ab31ddc5ae0a253b587d712c6113acdf49fa0100de0f7b3717528e35b7e70733538a8eec8fb17616d2198d02ba4e7690fab7933b676deddb27755d6a8f29c643dfff0e4bd7c2b13b7a57a3120cb2cbb70200339dc0862dafad481a63e7f90d14c54803d8b100e0ad5cae9a0a7b2f329c3b0000000000000002f4b2eebf5bcd42688b08ff0a6575a31f81f01c13c7cb674ff41cb3c7f6896d41e86bda845164825e28b9fb719e695a9eb9710f924aefde1c96bebe4274594038347691a088f9bcaeba90315d3b3cfc24388cc15dffeda1bd610582c5b74fa6c6e789ce440f71871a5e8b85000000005806743e8e075b8624686feb21dbdb9afd74dd0067d82a72c099a2d52a599494388cb56cdb5ef9190980f9128e689e07e98b2ed59e1537fc7de144dc2030374b0f5fcfd8f2ef242803f7bcbc07145f65b8912a4a335b858de8acf080852c49d353a00a5aac3d6a33e0075506a1fd25799f1637b1bafaf09954ef"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xcffd, 0x0, 0x200010001}) 2018/04/13 21:57:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x6}, 0x2c) 2018/04/13 21:57:16 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) 2018/04/13 21:57:16 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) mount(&(0x7f0000000000)='..', &(0x7f0000000080)='..', &(0x7f0000000180)='sysv\x00', 0x2000, 0x0) [ 596.183194] binder: release 32659:32660 transaction 224 in, still active [ 596.190193] binder: send failed reply for transaction 224 to 32659:32660 [ 596.227739] binder: undelivered TRANSACTION_COMPLETE [ 596.232983] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.242428] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:16 executing program 2: socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000bd3000)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0x80) getuid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2825, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000000)=0x8) [ 596.279676] binder: 32691:32694 ERROR: BC_REGISTER_LOOPER called without request 2018/04/13 21:57:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x6}, 0x2c) [ 596.327249] Disabled LAPIC found during irq injection [ 596.334510] binder: 32694 RLIMIT_NICE not set [ 596.345705] binder: 32694 RLIMIT_NICE not set 2018/04/13 21:57:16 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xcffd, 0x0, 0x200010001}) 2018/04/13 21:57:16 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) [ 596.407068] binder: release 32691:32694 transaction 226 in, still active [ 596.414233] binder: send failed reply for transaction 226 to 32691:32694 2018/04/13 21:57:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 596.451584] binder: undelivered TRANSACTION_COMPLETE [ 596.456845] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.547924] Disabled LAPIC found during irq injection [ 596.578863] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:17 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:17 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:17 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xcffd, 0x0, 0x200010001}) 2018/04/13 21:57:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/04/13 21:57:17 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) 2018/04/13 21:57:17 executing program 0: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2018/04/13 21:57:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/04/13 21:57:17 executing program 2: socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000bd3000)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0x80) getuid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2825, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000000)=0x8) [ 597.265794] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:17 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) [ 597.312522] Disabled LAPIC found during irq injection 2018/04/13 21:57:17 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:17 executing program 2: socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000bd3000)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0x80) getuid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2825, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000000)=0x8) 2018/04/13 21:57:17 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:17 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:18 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) [ 597.454548] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/04/13 21:57:18 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:18 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:18 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:18 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:18 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 597.684736] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:18 executing program 0: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2018/04/13 21:57:18 executing program 1: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2018/04/13 21:57:18 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:18 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:18 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:18 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) 2018/04/13 21:57:18 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) 2018/04/13 21:57:18 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) 2018/04/13 21:57:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000424000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/04/13 21:57:19 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}, {r1}], 0x2, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/13 21:57:19 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x855}, &(0x7f0000000300)=0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, r1, 0x0) r4 = accept4$inet(r2, &(0x7f0000000340)={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x800000000, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000480)=0x98) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000, @remote={0xfe, 0x80, [], 0xbb}, 0x66ea}, 0xf) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d}, 0x10) 2018/04/13 21:57:19 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) 2018/04/13 21:57:19 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r0) 2018/04/13 21:57:19 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [@ldst], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x1f) 2018/04/13 21:57:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000424000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 598.632620] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x400000) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000000)=[0x3, 0x4], 0x2, 0x1, 0x10001, 0x40000, 0x6, 0xffffffff00000001, {0x81, 0x1, 0x0, 0x9, 0x8001, 0x4961cce9, 0xffffffffffff7106, 0x564, 0x0, 0x2bda, 0x5df5, 0x80000000000000, 0x1f, 0x8, "286dedf9ab4eec0234d1b8972e30564d1c62924ba7df4e99dc0f83449ee0e054"}}) connect$vsock_dgram(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000800)=0x8007f) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, 0x25, 0x129, 0x0, 0x0, {0xc}, [@generic="4a8d3dc1c01436fb35af299b79575c668d175cdd9b26d790f736f6bd223c93a3d8ed135a09c2300f649bcd58e959c32d7a86a2668ae461218583662dcb26783253710490074aaf07a53369a9f0afd40027ea575f"]}, 0x68}, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x376, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, 0x3ee) capget(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x23, 0x3, 0x531552a7, 0x101, 0x1, 0x1}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80000001, 0x8, 0x1, 0x8000, 0x9, 0x8, 0xfffffffffffffff9, 0x9}, 0x20) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcd, &(0x7f0000000100)=""/186, &(0x7f0000000080)=0xba) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0x107000}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000bc0)=""/225, &(0x7f0000000300)=0xe1) r4 = socket(0x1e, 0x80001, 0x0) listen(r4, 0x0) connect$ax25(r4, &(0x7f00001c1ff0)={0x1e, {"028361440fd400"}}, 0x10) write$cgroup_int(r3, &(0x7f00000018c0)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac03ff09fe2d6f34f842d379b49e51e78af480680607ab9c61f26f3270086f5bbc32f52f8f407505531ad316c9ac211e787bc234bd9c3c2c18c4a2d7a8e1e6540ce45d19a8539736fc5de444ba54e73d26ac4d0c3108fc5cc092ab102619302ddcf31370d2f6b4680eff6384344c844d8ed011eaa4baf8f5940315dee415a03ee2eddaf4b37fea80e000008298903645d29a4f225ffd28dbae034"], 0xa3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x2f8, 0x80) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000440)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff]}}}, 0x2, 0xff}, &(0x7f0000000500)=0x90) [ 598.827864] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/13 21:57:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000424000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/04/13 21:57:19 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) 2018/04/13 21:57:19 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [@ldst], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x1f) 2018/04/13 21:57:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) 2018/04/13 21:57:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000066c0)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000005700)}}, 0x18) 2018/04/13 21:57:19 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000336f58)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) 2018/04/13 21:57:19 executing program 1: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2018/04/13 21:57:19 executing program 0: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2018/04/13 21:57:19 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [@ldst], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x1f) 2018/04/13 21:57:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000424000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/04/13 21:57:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000066c0)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000005700)}}, 0x18) 2018/04/13 21:57:20 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000336f58)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) 2018/04/13 21:57:20 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [@ldst], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x1f) 2018/04/13 21:57:20 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) 2018/04/13 21:57:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x4}, [@typed={0x8, 0xf, @fd}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000066c0)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000005700)}}, 0x18) 2018/04/13 21:57:20 executing program 1: socket$inet6(0xa, 0x80003, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000"], 0x1}, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r4 = getuid() getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) chown(&(0x7f0000000580)='./file0\x00', r4, r5) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x0, &(0x7f00000004c0)="c946a4a3aac5e5dc9b1514bd5faf430a13da27b411bb335d0ed474a2520dc54b25647dce2c92ad76ac9393a7d2447cfe20b210956085beab112ca0abc8a675cd9f97b8ad464b66fe71ef8857dc97f447a55b44474fc8ee246c09d515436aec603e419f041aea5976c489e25bdb21b06a4b441e5ec46e0a70ee1bd9889c1305e01e19a1d13d89fdeb7167c05320035bf7058beecd760a4a6c839d013dcf22bdaa233cac8a97c97a84289cd3885814") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x1, 0x7e, 0x3f, 0x100, 0xb5cf, 0x4b, 0x7, 0x7, 0x7, 0x6, 0xffffffff, 0xf95}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2018/04/13 21:57:20 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/13 21:57:20 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x200000000, r0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1800000000, 0x101, 0x800, 0x4}, {0x5, 0xc7db, 0x6, 0xfff}, {0x41, 0x100, 0x3, 0x4}, {0x1ff, 0x0, 0x7, 0x9}, {0x8, 0xfdc9, 0x9, 0x82f9}, {0x7ff80, 0x5, 0x80000001, 0x3}]}) close(r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 2018/04/13 21:57:20 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000336f58)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) 2018/04/13 21:57:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000500)=@listen={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) [ 600.425208] device bridge0 entered promiscuous mode [ 600.445547] device bridge0 left promiscuous mode 2018/04/13 21:57:21 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) 2018/04/13 21:57:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000066c0)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000005700)}}, 0x18) [ 600.511326] device bridge0 entered promiscuous mode [ 600.523453] device bridge0 left promiscuous mode 2018/04/13 21:57:21 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/13 21:57:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000500)=@listen={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) 2018/04/13 21:57:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x4}, [@typed={0x8, 0xf, @fd}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/04/13 21:57:21 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000336f58)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) 2018/04/13 21:57:21 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x200000000, r0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1800000000, 0x101, 0x800, 0x4}, {0x5, 0xc7db, 0x6, 0xfff}, {0x41, 0x100, 0x3, 0x4}, {0x1ff, 0x0, 0x7, 0x9}, {0x8, 0xfdc9, 0x9, 0x82f9}, {0x7ff80, 0x5, 0x80000001, 0x3}]}) close(r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 2018/04/13 21:57:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@nl=@unspec, 0x1, &(0x7f0000000080), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:21 executing program 1: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) [ 601.466636] device bridge0 entered promiscuous mode 2018/04/13 21:57:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000500)=@listen={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) [ 601.491469] device bridge0 left promiscuous mode 2018/04/13 21:57:22 executing program 1: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 21:57:22 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x200000000, r0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1800000000, 0x101, 0x800, 0x4}, {0x5, 0xc7db, 0x6, 0xfff}, {0x41, 0x100, 0x3, 0x4}, {0x1ff, 0x0, 0x7, 0x9}, {0x8, 0xfdc9, 0x9, 0x82f9}, {0x7ff80, 0x5, 0x80000001, 0x3}]}) close(r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 2018/04/13 21:57:22 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/13 21:57:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@nl=@unspec, 0x1, &(0x7f0000000080), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:22 executing program 3: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 21:57:22 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0xa, 0x5, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) [ 601.660619] device bridge0 entered promiscuous mode 2018/04/13 21:57:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000500)=@listen={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) [ 601.699624] device bridge0 left promiscuous mode 2018/04/13 21:57:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@nl=@unspec, 0x1, &(0x7f0000000080), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:22 executing program 1: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 21:57:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x4}, [@typed={0x8, 0xf, @fd}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:22 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/13 21:57:22 executing program 3: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 21:57:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x3, 0x2b9) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20}, 0x1c) poll(&(0x7f0000000380)=[{r0}], 0x1, 0x0) 2018/04/13 21:57:22 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x200000000, r0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1800000000, 0x101, 0x800, 0x4}, {0x5, 0xc7db, 0x6, 0xfff}, {0x41, 0x100, 0x3, 0x4}, {0x1ff, 0x0, 0x7, 0x9}, {0x8, 0xfdc9, 0x9, 0x82f9}, {0x7ff80, 0x5, 0x80000001, 0x3}]}) close(r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 2018/04/13 21:57:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@nl=@unspec, 0x1, &(0x7f0000000080), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:22 executing program 3: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 21:57:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x4}, [@typed={0x8, 0xf, @fd}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:22 executing program 1: r0 = socket$inet6(0xa, 0x10000000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00009e0ffc), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 21:57:22 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/13 21:57:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x38, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x6c, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "aabf21a21c6734cc"}}}}}}}, 0x0) [ 601.995111] device bridge0 entered promiscuous mode [ 602.019927] device bridge0 left promiscuous mode 2018/04/13 21:57:22 executing program 6: r0 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/04/13 21:57:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/snmp6\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/13 21:57:22 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00006b2000)={0xa}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000000)={@remote}, &(0x7f0000000080)=0x14) 2018/04/13 21:57:22 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00002e", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000000c0)=@proc={0x10}, 0xc, &(0x7f0000001480)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="0000b3f95380c73a5778ea2fd6bc14d4e80998486c52ba86fc0ff9bfedeae8ef0fb5daf7c197b79dfe"], 0x1}], 0x1, &(0x7f0000001680)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x98, 0x8000}, 0x4000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/13 21:57:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x38, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x6c, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "aabf21a21c6734cc"}}}}}}}, 0x0) 2018/04/13 21:57:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@getlink={0x5c, 0x12, 0x331, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f}, @IFLA_IF_NETNSID={0x8, 0x2e}, @IFLA_LINK_NETNSID={0x8, 0x25}, @IFLA_PROMISCUITY={0x8, 0x1e}, @IFLA_WEIGHT={0x8, 0xf}, @IFLA_VF_PORTS={0x14, 0x18, [{0x10, 0x1, [@typed={0x8, 0x0, @u32=0xfffff000}, @generic=' ']}]}]}, 0x5c}, 0x1}, 0x0) 2018/04/13 21:57:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:57:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="24000000210025f0071c0165ff0ffc0e020000000010000002e1080c08000b002ca72c44", 0x24) 2018/04/13 21:57:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe00c72b6df5b01b43401f75080039000500", 0x27) [ 602.213757] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 602.249534] bridge: RTM_NEWNEIGH with invalid state 0x0 2018/04/13 21:57:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) truncate(&(0x7f0000011000)='./bus\x00', 0xfffc) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x38, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x6c, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "aabf21a21c6734cc"}}}}}}}, 0x0) 2018/04/13 21:57:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:57:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@getlink={0x5c, 0x12, 0x331, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f}, @IFLA_IF_NETNSID={0x8, 0x2e}, @IFLA_LINK_NETNSID={0x8, 0x25}, @IFLA_PROMISCUITY={0x8, 0x1e}, @IFLA_WEIGHT={0x8, 0xf}, @IFLA_VF_PORTS={0x14, 0x18, [{0x10, 0x1, [@typed={0x8, 0x0, @u32=0xfffff000}, @generic=' ']}]}]}, 0x5c}, 0x1}, 0x0) 2018/04/13 21:57:22 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00002e", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000000c0)=@proc={0x10}, 0xc, &(0x7f0000001480)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="0000b3f95380c73a5778ea2fd6bc14d4e80998486c52ba86fc0ff9bfedeae8ef0fb5daf7c197b79dfe"], 0x1}], 0x1, &(0x7f0000001680)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x98, 0x8000}, 0x4000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 602.401521] bridge: RTM_NEWNEIGH with invalid state 0x0 2018/04/13 21:57:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/49, 0x31}], 0x5, &(0x7f0000000440)=""/230, 0xe6, 0xffffffffffffff67}, 0x12040) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x8, 0x40081) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000600)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000a000)={0xffffffffffffffa6, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f00000006c0)=[@flat={0x0, 0x100, r4}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000700)=[0x28, 0x18, 0x20, 0x28, 0x48]}, 0x1}}], 0x0, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000023c000)}) 2018/04/13 21:57:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/snmp6\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/13 21:57:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:57:23 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x38, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x6c, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "aabf21a21c6734cc"}}}}}}}, 0x0) [ 602.541654] bridge: RTM_NEWNEIGH with invalid state 0x0 2018/04/13 21:57:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) truncate(&(0x7f0000011000)='./bus\x00', 0xfffc) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) [ 602.635627] binder: 529:540 ioctl c018620b 20000640 returned -14 [ 602.677357] binder: 529:540 transaction failed 29189/-22, size 56-8 line 2848 [ 602.710445] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 602.738222] binder_alloc: binder_alloc_mmap_handler: 529 20000000-20002000 already mapped failed -16 [ 602.768098] binder: 529:540 ioctl c018620b 20000640 returned -14 [ 602.777352] binder: 529:547 ioctl 40086200 20000600 returned -22 2018/04/13 21:57:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@getlink={0x5c, 0x12, 0x331, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f}, @IFLA_IF_NETNSID={0x8, 0x2e}, @IFLA_LINK_NETNSID={0x8, 0x25}, @IFLA_PROMISCUITY={0x8, 0x1e}, @IFLA_WEIGHT={0x8, 0xf}, @IFLA_VF_PORTS={0x14, 0x18, [{0x10, 0x1, [@typed={0x8, 0x0, @u32=0xfffff000}, @generic=' ']}]}]}, 0x5c}, 0x1}, 0x0) 2018/04/13 21:57:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/snmp6\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/13 21:57:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400257f09004b01fcfc8c560a11c600f217e00101000000000000a2bc56c12b8c5b06580b0318fe0000002fb818ab5ea7d7fa73ea26927b0000200028213e146a1ce206", 0x48}], 0x1) 2018/04/13 21:57:23 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00002e", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000000c0)=@proc={0x10}, 0xc, &(0x7f0000001480)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="0000b3f95380c73a5778ea2fd6bc14d4e80998486c52ba86fc0ff9bfedeae8ef0fb5daf7c197b79dfe"], 0x1}], 0x1, &(0x7f0000001680)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x98, 0x8000}, 0x4000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/13 21:57:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/49, 0x31}], 0x5, &(0x7f0000000440)=""/230, 0xe6, 0xffffffffffffff67}, 0x12040) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x8, 0x40081) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000600)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000a000)={0xffffffffffffffa6, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f00000006c0)=[@flat={0x0, 0x100, r4}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000700)=[0x28, 0x18, 0x20, 0x28, 0x48]}, 0x1}}], 0x0, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000023c000)}) 2018/04/13 21:57:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) truncate(&(0x7f0000011000)='./bus\x00', 0xfffc) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/13 21:57:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f00002f7ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 602.786108] binder: 529:547 transaction failed 29189/-22, size 56-8 line 2848 [ 602.803317] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.808863] binder: undelivered TRANSACTION_ERROR: 29189 [ 603.009110] binder: 559:563 ioctl c018620b 20000640 returned -14 [ 603.045213] binder: 559:563 transaction failed 29189/-22, size 56-8 line 2848 2018/04/13 21:57:23 executing program 7: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)=@ethtool_dump}) 2018/04/13 21:57:23 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00002e", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000000c0)=@proc={0x10}, 0xc, &(0x7f0000001480)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="0000b3f95380c73a5778ea2fd6bc14d4e80998486c52ba86fc0ff9bfedeae8ef0fb5daf7c197b79dfe"], 0x1}], 0x1, &(0x7f0000001680)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x98, 0x8000}, 0x4000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/13 21:57:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/04/13 21:57:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/snmp6\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/13 21:57:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/49, 0x31}], 0x5, &(0x7f0000000440)=""/230, 0xe6, 0xffffffffffffff67}, 0x12040) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x8, 0x40081) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000600)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000a000)={0xffffffffffffffa6, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f00000006c0)=[@flat={0x0, 0x100, r4}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000700)=[0x28, 0x18, 0x20, 0x28, 0x48]}, 0x1}}], 0x0, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000023c000)}) 2018/04/13 21:57:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400257f09004b01fcfc8c560a11c600f217e00101000000000000a2bc56c12b8c5b06580b0318fe0000002fb818ab5ea7d7fa73ea26927b0000200028213e146a1ce206", 0x48}], 0x1) 2018/04/13 21:57:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@getlink={0x5c, 0x12, 0x331, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f}, @IFLA_IF_NETNSID={0x8, 0x2e}, @IFLA_LINK_NETNSID={0x8, 0x25}, @IFLA_PROMISCUITY={0x8, 0x1e}, @IFLA_WEIGHT={0x8, 0xf}, @IFLA_VF_PORTS={0x14, 0x18, [{0x10, 0x1, [@typed={0x8, 0x0, @u32=0xfffff000}, @generic=' ']}]}]}, 0x5c}, 0x1}, 0x0) 2018/04/13 21:57:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) truncate(&(0x7f0000011000)='./bus\x00', 0xfffc) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 603.108531] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/13 21:57:23 executing program 7: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)=@ethtool_dump}) 2018/04/13 21:57:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="270000001400070000010000120f0a0011000100f5fe211b366912d86283b9391a5b8ccaf1e800", 0x27) [ 603.259052] binder: 579:580 ioctl c018620b 20000640 returned -14 2018/04/13 21:57:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400257f09004b01fcfc8c560a11c600f217e00101000000000000a2bc56c12b8c5b06580b0318fe0000002fb818ab5ea7d7fa73ea26927b0000200028213e146a1ce206", 0x48}], 0x1) [ 603.349493] binder: 579:580 transaction failed 29189/-22, size 56-8 line 2848 2018/04/13 21:57:23 executing program 7: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)=@ethtool_dump}) 2018/04/13 21:57:23 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="11", 0x1}], 0x1, 0x0) 2018/04/13 21:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)) 2018/04/13 21:57:24 executing program 1: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)) 2018/04/13 21:57:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="270000001400070000010000120f0a0011000100f5fe211b366912d86283b9391a5b8ccaf1e800", 0x27) 2018/04/13 21:57:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/49, 0x31}], 0x5, &(0x7f0000000440)=""/230, 0xe6, 0xffffffffffffff67}, 0x12040) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x8, 0x40081) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000600)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000a000)={0xffffffffffffffa6, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f00000006c0)=[@flat={0x0, 0x100, r4}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000700)=[0x28, 0x18, 0x20, 0x28, 0x48]}, 0x1}}], 0x0, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000023c000)}) 2018/04/13 21:57:24 executing program 7: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)=@ethtool_dump}) [ 603.499616] binder: undelivered TRANSACTION_ERROR: 29189 [ 603.628513] binder: 601:607 ioctl c018620b 20000640 returned -14 [ 603.652201] binder: 601:607 transaction failed 29189/-22, size 56-8 line 2848 [ 603.670831] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/13 21:57:25 executing program 1: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)) 2018/04/13 21:57:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400257f09004b01fcfc8c560a11c600f217e00101000000000000a2bc56c12b8c5b06580b0318fe0000002fb818ab5ea7d7fa73ea26927b0000200028213e146a1ce206", 0x48}], 0x1) 2018/04/13 21:57:25 executing program 7: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x2082cf40) recvmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f00000002c0)=""/80, 0x50}}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000003c0)}}], 0x2, 0x0, &(0x7f0000005280)={0x77359400}) close(r0) 2018/04/13 21:57:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="270000001400070000010000120f0a0011000100f5fe211b366912d86283b9391a5b8ccaf1e800", 0x27) 2018/04/13 21:57:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/13 21:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)) 2018/04/13 21:57:25 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:25 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="11", 0x1}], 0x1, 0x0) 2018/04/13 21:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)) 2018/04/13 21:57:25 executing program 1: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)) 2018/04/13 21:57:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="270000001400070000010000120f0a0011000100f5fe211b366912d86283b9391a5b8ccaf1e800", 0x27) 2018/04/13 21:57:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/13 21:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)) 2018/04/13 21:57:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000f1df23), 0x0, 0xffffffffffffffff, &(0x7f0000fcefd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14}}}}, 0x2e) 2018/04/13 21:57:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/13 21:57:26 executing program 1: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)) 2018/04/13 21:57:26 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="11", 0x1}], 0x1, 0x0) 2018/04/13 21:57:26 executing program 7: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x2082cf40) recvmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f00000002c0)=""/80, 0x50}}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000003c0)}}], 0x2, 0x0, &(0x7f0000005280)={0x77359400}) close(r0) 2018/04/13 21:57:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10000000001c, &(0x7f00007b7fff)=""/1, &(0x7f000007b000)=0x1) 2018/04/13 21:57:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000f1df23), 0x0, 0xffffffffffffffff, &(0x7f0000fcefd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14}}}}, 0x2e) 2018/04/13 21:57:26 executing program 3: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10000000001c, &(0x7f00007b7fff)=""/1, &(0x7f000007b000)=0x1) 2018/04/13 21:57:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x4003) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'eql\x00'}) io_setup(0x0, &(0x7f00000001c0)) 2018/04/13 21:57:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/13 21:57:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000f1df23), 0x0, 0xffffffffffffffff, &(0x7f0000fcefd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14}}}}, 0x2e) 2018/04/13 21:57:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x4003) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'eql\x00'}) io_setup(0x0, &(0x7f00000001c0)) 2018/04/13 21:57:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000f1df23), 0x0, 0xffffffffffffffff, &(0x7f0000fcefd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14}}}}, 0x2e) 2018/04/13 21:57:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10000000001c, &(0x7f00007b7fff)=""/1, &(0x7f000007b000)=0x1) 2018/04/13 21:57:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867dfffe0200", [0x0, 0x2]}) 2018/04/13 21:57:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10000000001c, &(0x7f00007b7fff)=""/1, &(0x7f000007b000)=0x1) 2018/04/13 21:57:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x4003) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'eql\x00'}) io_setup(0x0, &(0x7f00000001c0)) 2018/04/13 21:57:27 executing program 7: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x2082cf40) recvmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f00000002c0)=""/80, 0x50}}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000003c0)}}], 0x2, 0x0, &(0x7f0000005280)={0x77359400}) close(r0) 2018/04/13 21:57:27 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="11", 0x1}], 0x1, 0x0) 2018/04/13 21:57:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:27 executing program 5: timer_create(0xffffffffffffffff, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000098d000), &(0x7f0000039f56)}}, &(0x7f0000636000)) 2018/04/13 21:57:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x11ee, 0x5, 0x5, 0xd78, 0x4, 0x5, 0x9, 0x4}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000002b00)=@alg, 0x80, &(0x7f0000004240), 0x0, 0x0, 0xfffffffffffffe54}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x989680}) r2 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r2, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x33c}], 0x2000000000000144) r3 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x2, 0x6, 0x1, 0x4, 0x0, 0x6854f4ca, 0xbad, 0x2c54, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x2, 0x6590, 0x2, 0x7, 0x0, 0x4, 0x1, 0x4, 0x3, 0x6, 0x0, 0x80}, {0x29f2, 0x0, 0xcb1, 0x5, 0x3ff, 0x0, 0x3ff, 0x1, 0x5, 0xffffffff, 0x0, 0x5, 0x1}], 0xad}) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0xfff, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) tkill(r3, 0x1020000000016) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000534ffc)=0x4, 0x4) kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, r5) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r6, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x0, 0x80, 0xd1, 0xa9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r7, 0x9b, 0x2}, &(0x7f0000000400)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000279f7df94ed9e4afa97200310300000000000008001f726eb9"], 0x1}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 2018/04/13 21:57:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f}, 0x1db) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xfdbb, &(0x7f000000cf3d)=""/195}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xd2c, 0x70bd2d, 0x25dfdbfc, {0x2}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2018/04/13 21:57:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x4003) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'eql\x00'}) io_setup(0x0, &(0x7f00000001c0)) 2018/04/13 21:57:28 executing program 5: timer_create(0xffffffffffffffff, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000098d000), &(0x7f0000039f56)}}, &(0x7f0000636000)) 2018/04/13 21:57:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867dfffe0200", [0x0, 0x2]}) 2018/04/13 21:57:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867dfffe0200", [0x0, 0x2]}) 2018/04/13 21:57:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x3, 0x0, 0x0, 0x2}], &(0x7f000001c000), 0x4, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f}, 0x1db) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xfdbb, &(0x7f000000cf3d)=""/195}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xd2c, 0x70bd2d, 0x25dfdbfc, {0x2}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2018/04/13 21:57:28 executing program 5: timer_create(0xffffffffffffffff, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000098d000), &(0x7f0000039f56)}}, &(0x7f0000636000)) 2018/04/13 21:57:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f}, 0x1db) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xfdbb, &(0x7f000000cf3d)=""/195}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xd2c, 0x70bd2d, 0x25dfdbfc, {0x2}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2018/04/13 21:57:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867dfffe0200", [0x0, 0x2]}) 2018/04/13 21:57:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x3, 0x0, 0x0, 0x2}], &(0x7f000001c000), 0x4, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:28 executing program 5: timer_create(0xffffffffffffffff, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000098d000), &(0x7f0000039f56)}}, &(0x7f0000636000)) 2018/04/13 21:57:28 executing program 7: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x2082cf40) recvmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f00000002c0)=""/80, 0x50}}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000003c0)}}], 0x2, 0x0, &(0x7f0000005280)={0x77359400}) close(r0) 2018/04/13 21:57:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:28 executing program 2: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/236) 2018/04/13 21:57:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2018/04/13 21:57:29 executing program 2: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/236) 2018/04/13 21:57:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f}, 0x1db) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xfdbb, &(0x7f000000cf3d)=""/195}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xd2c, 0x70bd2d, 0x25dfdbfc, {0x2}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2018/04/13 21:57:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x3, 0x0, 0x0, 0x2}], &(0x7f000001c000), 0x4, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2018/04/13 21:57:29 executing program 6: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000176000)="00640001000445") getdents(r0, &(0x7f0000000440)=""/203, 0x362) getdents64(r0, &(0x7f0000000df0)=""/528, 0xff95) 2018/04/13 21:57:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000), 0x1be) 2018/04/13 21:57:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:29 executing program 2: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/236) 2018/04/13 21:57:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000), 0x1be) 2018/04/13 21:57:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x3, 0x0, 0x0, 0x2}], &(0x7f000001c000), 0x4, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/13 21:57:29 executing program 2: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/236) 2018/04/13 21:57:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:29 executing program 6: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000176000)="00640001000445") getdents(r0, &(0x7f0000000440)=""/203, 0x362) getdents64(r0, &(0x7f0000000df0)=""/528, 0xff95) 2018/04/13 21:57:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@un=@abs, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000), 0x1be) 2018/04/13 21:57:29 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2003, &(0x7f0000000040)=0x0) io_destroy(r0) 2018/04/13 21:57:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2018/04/13 21:57:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2018/04/13 21:57:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2003, &(0x7f0000000040)=0x0) io_destroy(r0) 2018/04/13 21:57:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@un=@abs, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/13 21:57:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000), 0x1be) 2018/04/13 21:57:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="66d64e6b6a78b446b90250e5e7f23bb6b5c279750210afbb334cc831e1614e8d", 0x20}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:57:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) 2018/04/13 21:57:30 executing program 6: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000176000)="00640001000445") getdents(r0, &(0x7f0000000440)=""/203, 0x362) getdents64(r0, &(0x7f0000000df0)=""/528, 0xff95) 2018/04/13 21:57:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2003, &(0x7f0000000040)=0x0) io_destroy(r0) 2018/04/13 21:57:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2018/04/13 21:57:30 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000000040)="ac0100000000e000000100a22f8cca1bbd01000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf4b68", 0x38, 0x0, &(0x7f0000000000)={0x2}, 0x10) 2018/04/13 21:57:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@un=@abs, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:30 executing program 6: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000176000)="00640001000445") getdents(r0, &(0x7f0000000440)=""/203, 0x362) getdents64(r0, &(0x7f0000000df0)=""/528, 0xff95) 2018/04/13 21:57:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) 2018/04/13 21:57:30 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="66d64e6b6a78b446b90250e5e7f23bb6b5c279750210afbb334cc831e1614e8d", 0x20}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:57:31 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2003, &(0x7f0000000040)=0x0) io_destroy(r0) 2018/04/13 21:57:31 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000000040)="ac0100000000e000000100a22f8cca1bbd01000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf4b68", 0x38, 0x0, &(0x7f0000000000)={0x2}, 0x10) 2018/04/13 21:57:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="66d64e6b6a78b446b90250e5e7f23bb6b5c279750210afbb334cc831e1614e8d", 0x20}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:57:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@un=@abs, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/13 21:57:31 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000000040)="ac0100000000e000000100a22f8cca1bbd01000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf4b68", 0x38, 0x0, &(0x7f0000000000)={0x2}, 0x10) 2018/04/13 21:57:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) 2018/04/13 21:57:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(tnepres))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:31 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="66d64e6b6a78b446b90250e5e7f23bb6b5c279750210afbb334cc831e1614e8d", 0x20}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/13 21:57:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) 2018/04/13 21:57:31 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000000040)="ac0100000000e000000100a22f8cca1bbd01000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf4b68", 0x38, 0x0, &(0x7f0000000000)={0x2}, 0x10) 2018/04/13 21:57:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(tnepres))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:31 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) 2018/04/13 21:57:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/04/13 21:57:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000449fd0)={0x18, 0x0, &(0x7f0000000200)=[@register_looper={0x630b}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000040)}) 2018/04/13 21:57:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000018cff6)='net/kcm\x00\b\x00') readv(r0, &(0x7f0000c43f70)=[{&(0x7f0000f44000)=""/100, 0x64}, {&(0x7f0000ea5000)=""/4096, 0x1000}], 0x2) 2018/04/13 21:57:32 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(tnepres))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/13 21:57:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/04/13 21:57:32 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(tnepres))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) [ 611.829443] binder: 914:918 ERROR: BC_REGISTER_LOOPER called without request [ 611.836870] binder: 914:918 BC_ACQUIRE_DONE u0000000000000000 no match [ 611.921081] binder: 914:931 ERROR: BC_REGISTER_LOOPER called without request [ 611.928507] binder: 914:931 BC_ACQUIRE_DONE u0000000000000000 no match 2018/04/13 21:57:33 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:33 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 2018/04/13 21:57:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/13 21:57:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000449fd0)={0x18, 0x0, &(0x7f0000000200)=[@register_looper={0x630b}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000040)}) 2018/04/13 21:57:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/04/13 21:57:33 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0xffff}) 2018/04/13 21:57:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000018cff6)='net/kcm\x00\b\x00') readv(r0, &(0x7f0000c43f70)=[{&(0x7f0000f44000)=""/100, 0x64}, {&(0x7f0000ea5000)=""/4096, 0x1000}], 0x2) 2018/04/13 21:57:33 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:33 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0xffff}) 2018/04/13 21:57:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 612.745955] binder: 950:960 ERROR: BC_REGISTER_LOOPER called without request [ 612.753351] binder: 950:960 BC_ACQUIRE_DONE u0000000000000000 no match 2018/04/13 21:57:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000449fd0)={0x18, 0x0, &(0x7f0000000200)=[@register_looper={0x630b}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000040)}) 2018/04/13 21:57:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000018cff6)='net/kcm\x00\b\x00') readv(r0, &(0x7f0000c43f70)=[{&(0x7f0000f44000)=""/100, 0x64}, {&(0x7f0000ea5000)=""/4096, 0x1000}], 0x2) [ 612.909301] binder: 968:970 ERROR: BC_REGISTER_LOOPER called without request [ 612.916818] binder: 968:970 BC_ACQUIRE_DONE u0000000000000000 no match 2018/04/13 21:57:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0xffff}) 2018/04/13 21:57:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/13 21:57:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000018cff6)='net/kcm\x00\b\x00') readv(r0, &(0x7f0000c43f70)=[{&(0x7f0000f44000)=""/100, 0x64}, {&(0x7f0000ea5000)=""/4096, 0x1000}], 0x2) 2018/04/13 21:57:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000449fd0)={0x18, 0x0, &(0x7f0000000200)=[@register_looper={0x630b}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000040)}) 2018/04/13 21:57:34 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:34 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 2018/04/13 21:57:34 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0xffff}) 2018/04/13 21:57:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/13 21:57:34 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004ed000/0x3000)=nil, 0x3000, 0x11) 2018/04/13 21:57:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb729", 0x11) [ 613.740071] binder: 990:994 ERROR: BC_REGISTER_LOOPER called without request [ 613.747410] binder: 990:994 BC_ACQUIRE_DONE u0000000000000000 no match 2018/04/13 21:57:34 executing program 0: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:34 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004ed000/0x3000)=nil, 0x3000, 0x11) 2018/04/13 21:57:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/13 21:57:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb729", 0x11) 2018/04/13 21:57:34 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004ed000/0x3000)=nil, 0x3000, 0x11) 2018/04/13 21:57:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb729", 0x11) 2018/04/13 21:57:35 executing program 0: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:35 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb729", 0x11) 2018/04/13 21:57:35 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:35 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/04/13 21:57:35 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004ed000/0x3000)=nil, 0x3000, 0x11) 2018/04/13 21:57:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/13 21:57:35 executing program 4: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:35 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/13 21:57:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/13 21:57:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:35 executing program 0: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:36 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x19) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) syz_emit_ethernet(0x7a, &(0x7f0000003000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "273abe", 0x44, 0x0, 0x0, @dev={0xfe, 0x80}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/13 21:57:36 executing program 4: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:36 executing program 1: perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f00000edf00)={0x58, 0x0, 0x1, @random="070000004044b23250f0e6065d86a61bf2b3b36e2708546d44a355dededda48445f7bf7b3a8d3b874662bb74e794b2ee47ed46cd5ed34882afb9950b0003d332fdc82b8391907f08"}, 0x58) 2018/04/13 21:57:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000080)}, 0x0) sendto$inet(r0, &(0x7f00000000c0)="b3", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/13 21:57:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:36 executing program 0: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:36 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x19) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) syz_emit_ethernet(0x7a, &(0x7f0000003000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "273abe", 0x44, 0x0, 0x0, @dev={0xfe, 0x80}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/13 21:57:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = epoll_create(0x400200001ffe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001b3073)) 2018/04/13 21:57:36 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x19) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) syz_emit_ethernet(0x7a, &(0x7f0000003000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "273abe", 0x44, 0x0, 0x0, @dev={0xfe, 0x80}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) [ 616.212860] CUSE: DEVNAME unspecified 2018/04/13 21:57:37 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x19) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e", 0x1}], 0x1, &(0x7f0000002000)}, 0x8000) syz_emit_ethernet(0x7a, &(0x7f0000003000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "273abe", 0x44, 0x0, 0x0, @dev={0xfe, 0x80}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/13 21:57:37 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000041000)='./file0\x00') mkdirat(r0, &(0x7f0000028000)='./control\x00', 0x0) fcntl$notify(r0, 0x402, 0x800) renameat(r0, &(0x7f0000043ff8)='./file0\x00', r0, &(0x7f0000045ff7)='./file1\x00') renameat2(r0, &(0x7f0000047ff6)='./control\x00', r0, &(0x7f0000011000)='./file1\x00', 0x2) 2018/04/13 21:57:37 executing program 4: mount(&(0x7f0000f89ff8)='./file1\x00', &(0x7f0000a9eff8)='..', &(0x7f0000127000)='rootfs\x00', 0x0, &(0x7f000023a000)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) 2018/04/13 21:57:37 executing program 1: perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f00000edf00)={0x58, 0x0, 0x1, @random="070000004044b23250f0e6065d86a61bf2b3b36e2708546d44a355dededda48445f7bf7b3a8d3b874662bb74e794b2ee47ed46cd5ed34882afb9950b0003d332fdc82b8391907f08"}, 0x58) 2018/04/13 21:57:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = epoll_create(0x400200001ffe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001b3073)) 2018/04/13 21:57:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x0, 0x10000}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:57:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) 2018/04/13 21:57:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) [ 617.281632] CUSE: DEVNAME unspecified 2018/04/13 21:57:37 executing program 1: perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f00000edf00)={0x58, 0x0, 0x1, @random="070000004044b23250f0e6065d86a61bf2b3b36e2708546d44a355dededda48445f7bf7b3a8d3b874662bb74e794b2ee47ed46cd5ed34882afb9950b0003d332fdc82b8391907f08"}, 0x58) 2018/04/13 21:57:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = epoll_create(0x400200001ffe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001b3073)) 2018/04/13 21:57:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) 2018/04/13 21:57:37 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000041000)='./file0\x00') mkdirat(r0, &(0x7f0000028000)='./control\x00', 0x0) fcntl$notify(r0, 0x402, 0x800) renameat(r0, &(0x7f0000043ff8)='./file0\x00', r0, &(0x7f0000045ff7)='./file1\x00') renameat2(r0, &(0x7f0000047ff6)='./control\x00', r0, &(0x7f0000011000)='./file1\x00', 0x2) 2018/04/13 21:57:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) 2018/04/13 21:57:38 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) [ 617.442546] CUSE: DEVNAME unspecified 2018/04/13 21:57:38 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000041000)='./file0\x00') mkdirat(r0, &(0x7f0000028000)='./control\x00', 0x0) fcntl$notify(r0, 0x402, 0x800) renameat(r0, &(0x7f0000043ff8)='./file0\x00', r0, &(0x7f0000045ff7)='./file1\x00') renameat2(r0, &(0x7f0000047ff6)='./control\x00', r0, &(0x7f0000011000)='./file1\x00', 0x2) 2018/04/13 21:57:38 executing program 1: perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f00000edf00)={0x58, 0x0, 0x1, @random="070000004044b23250f0e6065d86a61bf2b3b36e2708546d44a355dededda48445f7bf7b3a8d3b874662bb74e794b2ee47ed46cd5ed34882afb9950b0003d332fdc82b8391907f08"}, 0x58) 2018/04/13 21:57:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = epoll_create(0x400200001ffe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001b3073)) [ 617.584161] CUSE: DEVNAME unspecified 2018/04/13 21:57:38 executing program 2: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002b80), 0x4) 2018/04/13 21:57:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) 2018/04/13 21:57:38 executing program 7: r0 = socket(0xa, 0x80003, 0x1) sendmsg$unix(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000020c0), 0x0, &(0x7f00000026c0)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) 2018/04/13 21:57:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 2018/04/13 21:57:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:38 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000041000)='./file0\x00') mkdirat(r0, &(0x7f0000028000)='./control\x00', 0x0) fcntl$notify(r0, 0x402, 0x800) renameat(r0, &(0x7f0000043ff8)='./file0\x00', r0, &(0x7f0000045ff7)='./file1\x00') renameat2(r0, &(0x7f0000047ff6)='./control\x00', r0, &(0x7f0000011000)='./file1\x00', 0x2) 2018/04/13 21:57:38 executing program 3: mbind(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x4, &(0x7f0000899000)=0x9, 0x800, 0x0) r0 = msgget$private(0x0, 0x202) msgctl$IPC_RMID(r0, 0x0) 2018/04/13 21:57:38 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f84f90)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa}}]}, 0x50}, 0x1}, 0x0) 2018/04/13 21:57:38 executing program 7: r0 = socket(0xa, 0x80003, 0x1) sendmsg$unix(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000020c0), 0x0, &(0x7f00000026c0)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) 2018/04/13 21:57:38 executing program 2: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002b80), 0x4) 2018/04/13 21:57:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000080), &(0x7f0000000100)=0x276) 2018/04/13 21:57:38 executing program 3: mbind(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x4, &(0x7f0000899000)=0x9, 0x800, 0x0) r0 = msgget$private(0x0, 0x202) msgctl$IPC_RMID(r0, 0x0) 2018/04/13 21:57:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 2018/04/13 21:57:39 executing program 7: r0 = socket(0xa, 0x80003, 0x1) sendmsg$unix(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000020c0), 0x0, &(0x7f00000026c0)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) 2018/04/13 21:57:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="f27b659b3ae3bb7986c0b71d862b39f0", 0x10}], 0x1}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}], 0x2, 0x0) 2018/04/13 21:57:39 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f84f90)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa}}]}, 0x50}, 0x1}, 0x0) 2018/04/13 21:57:39 executing program 2: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002b80), 0x4) 2018/04/13 21:57:39 executing program 7: r0 = socket(0xa, 0x80003, 0x1) sendmsg$unix(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000020c0), 0x0, &(0x7f00000026c0)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) 2018/04/13 21:57:39 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000cb8f7c)=""/132, 0x84, 0x0, &(0x7f0000f7b000)={0x0, 0x989680}) madvise(&(0x7f0000f7a000/0x10000)=nil, 0x10000, 0x4) 2018/04/13 21:57:39 executing program 3: mbind(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x4, &(0x7f0000899000)=0x9, 0x800, 0x0) r0 = msgget$private(0x0, 0x202) msgctl$IPC_RMID(r0, 0x0) 2018/04/13 21:57:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 2018/04/13 21:57:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="f27b659b3ae3bb7986c0b71d862b39f0", 0x10}], 0x1}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}], 0x2, 0x0) 2018/04/13 21:57:39 executing program 2: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002b80), 0x4) 2018/04/13 21:57:39 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000af2000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 2018/04/13 21:57:39 executing program 3: mbind(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x4, &(0x7f0000899000)=0x9, 0x800, 0x0) r0 = msgget$private(0x0, 0x202) msgctl$IPC_RMID(r0, 0x0) 2018/04/13 21:57:39 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f84f90)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa}}]}, 0x50}, 0x1}, 0x0) 2018/04/13 21:57:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:39 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000cb8f7c)=""/132, 0x84, 0x0, &(0x7f0000f7b000)={0x0, 0x989680}) madvise(&(0x7f0000f7a000/0x10000)=nil, 0x10000, 0x4) 2018/04/13 21:57:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:39 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000af2000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 2018/04/13 21:57:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="f27b659b3ae3bb7986c0b71d862b39f0", 0x10}], 0x1}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}], 0x2, 0x0) 2018/04/13 21:57:39 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f84f90)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa}}]}, 0x50}, 0x1}, 0x0) 2018/04/13 21:57:39 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100}}], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/13 21:57:40 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000cb8f7c)=""/132, 0x84, 0x0, &(0x7f0000f7b000)={0x0, 0x989680}) madvise(&(0x7f0000f7a000/0x10000)=nil, 0x10000, 0x4) 2018/04/13 21:57:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 2018/04/13 21:57:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000af2000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 2018/04/13 21:57:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="f27b659b3ae3bb7986c0b71d862b39f0", 0x10}], 0x1}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}], 0x2, 0x0) 2018/04/13 21:57:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000af2000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 2018/04/13 21:57:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x492492492492285}) 2018/04/13 21:57:40 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100}}], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/13 21:57:40 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000cb8f7c)=""/132, 0x84, 0x0, &(0x7f0000f7b000)={0x0, 0x989680}) madvise(&(0x7f0000f7a000/0x10000)=nil, 0x10000, 0x4) 2018/04/13 21:57:40 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x20, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00005c1000/0x2000)=nil, 0x2000}, 0x1}) 2018/04/13 21:57:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000080)) 2018/04/13 21:57:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000080)) 2018/04/13 21:57:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x492492492492285}) 2018/04/13 21:57:41 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100}}], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/13 21:57:41 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x20, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00005c1000/0x2000)=nil, 0x2000}, 0x1}) 2018/04/13 21:57:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000003ff8)) 2018/04/13 21:57:41 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x913, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000003ff8)) 2018/04/13 21:57:41 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100}}], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/13 21:57:41 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x913, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000003ff8)) 2018/04/13 21:57:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x492492492492285}) 2018/04/13 21:57:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000080)) 2018/04/13 21:57:41 executing program 3: mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000b18000/0xe000)=nil) 2018/04/13 21:57:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000003ff8)) 2018/04/13 21:57:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000080)) 2018/04/13 21:57:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x492492492492285}) 2018/04/13 21:57:42 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x20, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00005c1000/0x2000)=nil, 0x2000}, 0x1}) 2018/04/13 21:57:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=@flushpolicy={0x10, 0x1d, 0x11}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:42 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x913, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:42 executing program 3: mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000b18000/0xe000)=nil) 2018/04/13 21:57:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000004d40)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006d40)={0x0, 0x1c9c380}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x200000000000a, 0x4) write(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:42 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000b8b000)={&(0x7f0000b07f80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f0000000000000008fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35120ec64fc33302c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff9000000000000000700008001"}, 0x80, &(0x7f000093a000), 0x0, &(0x7f0000c79d40)}, 0x0) 2018/04/13 21:57:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=@flushpolicy={0x10, 0x1d, 0x11}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:43 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x20, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00005c1000/0x2000)=nil, 0x2000}, 0x1}) 2018/04/13 21:57:43 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x913, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=@flushpolicy={0x10, 0x1d, 0x11}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:43 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0x1e9, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000e6a000)={0x1, {&(0x7f0000c0bf1a)=""/230, 0xe6, &(0x7f0000aecf5e)=""/162, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/13 21:57:43 executing program 3: mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000b18000/0xe000)=nil) 2018/04/13 21:57:43 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000b8b000)={&(0x7f0000b07f80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f0000000000000008fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35120ec64fc33302c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff9000000000000000700008001"}, 0x80, &(0x7f000093a000), 0x0, &(0x7f0000c79d40)}, 0x0) 2018/04/13 21:57:43 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 2018/04/13 21:57:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000180)}, 0x10043) recvmsg(r0, &(0x7f0000002080)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000001040), 0x0, &(0x7f0000001080)=""/4096, 0x1000}, 0x0) 2018/04/13 21:57:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=@flushpolicy={0x10, 0x1d, 0x11}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:43 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0x1e9, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000e6a000)={0x1, {&(0x7f0000c0bf1a)=""/230, 0xe6, &(0x7f0000aecf5e)=""/162, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/13 21:57:43 executing program 3: mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000b18000/0xe000)=nil) 2018/04/13 21:57:43 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000003b00)="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", 0x86a}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/13 21:57:43 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000b8b000)={&(0x7f0000b07f80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f0000000000000008fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35120ec64fc33302c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff9000000000000000700008001"}, 0x80, &(0x7f000093a000), 0x0, &(0x7f0000c79d40)}, 0x0) 2018/04/13 21:57:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = userfaultfd(0x0) r2 = dup3(r0, r1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x29, 0x7, 0x7fffffffefff, 0x0) 2018/04/13 21:57:43 executing program 2: syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000340)=0x0) prctl$setptracer(0x59616d61, r2) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r3) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a3", 0x3, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) prctl$setptracer(0x59616d61, r2) 2018/04/13 21:57:43 executing program 3: prctl$seccomp(0x21, 0x40020000, &(0x7f0000000080)={0x7, &(0x7f00000000c0)=[{0x9, 0x4, 0x0, 0x8}, {0xfffffffffffffffa, 0xfe0, 0x8, 0x3ff}, {0x401, 0x64, 0x6, 0x8}, {0x1, 0xffff, 0x100, 0x1}, {0x4000000, 0x5, 0x3, 0x7fffffff}, {0x7, 0x1, 0x200800000, 0x3}, {0xf51, 0x3, 0x9, 0x3}]}) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005b1fd0)="e6210000000000000000030005000bfaf9f300010033c23cff00000000fe000225070097c11fd4e4c4dc5926a8000194", 0x30) r2 = dup3(r0, r1, 0x0) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x2, 0x4, "cd6eea9a6641200da583248a3faed470796a29fa4b8cf035abcceaf181b8dd4099efd8dded861d1604823f4ad28cec244ed592d94493b4ac073cff3562d817", 0x4}, 0x80) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4a000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x3e, 0x410, 0x70bd26, 0x25dfdbfc, {0xb}, [@generic="42d8573f3328be55c15c1df2bf934943ccabdb4e876dd350a75687d12bf2e586228000e1c803459cada8b7463f4b0aa88782a84da17eff755ab4d528c18e837c8ced"]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x100fff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x66, 0x0, 0x9, 0x9, 0x10, 0x2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002) 2018/04/13 21:57:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000180)}, 0x10043) recvmsg(r0, &(0x7f0000002080)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000001040), 0x0, &(0x7f0000001080)=""/4096, 0x1000}, 0x0) 2018/04/13 21:57:44 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000003b00)="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", 0x86a}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/13 21:57:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = userfaultfd(0x0) r2 = dup3(r0, r1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x29, 0x7, 0x7fffffffefff, 0x0) 2018/04/13 21:57:44 executing program 2: syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000340)=0x0) prctl$setptracer(0x59616d61, r2) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r3) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a3", 0x3, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) prctl$setptracer(0x59616d61, r2) 2018/04/13 21:57:44 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x10000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc0, &(0x7f000079bffc), &(0x7f0000000200)=0x4) 2018/04/13 21:57:44 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000b8b000)={&(0x7f0000b07f80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f0000000000000008fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35120ec64fc33302c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff9000000000000000700008001"}, 0x80, &(0x7f000093a000), 0x0, &(0x7f0000c79d40)}, 0x0) 2018/04/13 21:57:44 executing program 3: prctl$seccomp(0x21, 0x40020000, &(0x7f0000000080)={0x7, &(0x7f00000000c0)=[{0x9, 0x4, 0x0, 0x8}, {0xfffffffffffffffa, 0xfe0, 0x8, 0x3ff}, {0x401, 0x64, 0x6, 0x8}, {0x1, 0xffff, 0x100, 0x1}, {0x4000000, 0x5, 0x3, 0x7fffffff}, {0x7, 0x1, 0x200800000, 0x3}, {0xf51, 0x3, 0x9, 0x3}]}) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005b1fd0)="e6210000000000000000030005000bfaf9f300010033c23cff00000000fe000225070097c11fd4e4c4dc5926a8000194", 0x30) r2 = dup3(r0, r1, 0x0) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x2, 0x4, "cd6eea9a6641200da583248a3faed470796a29fa4b8cf035abcceaf181b8dd4099efd8dded861d1604823f4ad28cec244ed592d94493b4ac073cff3562d817", 0x4}, 0x80) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4a000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x3e, 0x410, 0x70bd26, 0x25dfdbfc, {0xb}, [@generic="42d8573f3328be55c15c1df2bf934943ccabdb4e876dd350a75687d12bf2e586228000e1c803459cada8b7463f4b0aa88782a84da17eff755ab4d528c18e837c8ced"]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x100fff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x66, 0x0, 0x9, 0x9, 0x10, 0x2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002) 2018/04/13 21:57:44 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0x1e9, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000e6a000)={0x1, {&(0x7f0000c0bf1a)=""/230, 0xe6, &(0x7f0000aecf5e)=""/162, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/13 21:57:44 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000003b00)="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", 0x86a}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/13 21:57:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = userfaultfd(0x0) r2 = dup3(r0, r1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x29, 0x7, 0x7fffffffefff, 0x0) 2018/04/13 21:57:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x24, 0x2c, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @binary="085454a7a1"}]}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:57:44 executing program 2: syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000340)=0x0) prctl$setptracer(0x59616d61, r2) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r3) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a3", 0x3, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) prctl$setptracer(0x59616d61, r2) 2018/04/13 21:57:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = userfaultfd(0x0) r2 = dup3(r0, r1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x29, 0x7, 0x7fffffffefff, 0x0) 2018/04/13 21:57:44 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000003b00)="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", 0x86a}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/13 21:57:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000180)}, 0x10043) recvmsg(r0, &(0x7f0000002080)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000001040), 0x0, &(0x7f0000001080)=""/4096, 0x1000}, 0x0) 2018/04/13 21:57:45 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0x1e9, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000e6a000)={0x1, {&(0x7f0000c0bf1a)=""/230, 0xe6, &(0x7f0000aecf5e)=""/162, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/13 21:57:45 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x10000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc0, &(0x7f000079bffc), &(0x7f0000000200)=0x4) 2018/04/13 21:57:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x24, 0x2c, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @binary="085454a7a1"}]}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:57:45 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x82}]}, 0x10) sendmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="2b26de5f6e6e0dae970f8c62702edff0fa2a9eab96b79bd50d40612e5758f65ee7c9683c66c7ffa4ec58e0f9f993eccf858b424092d4ecd075ac7e7aefc53bc1fbfa229464cc786773a8e10659b612f556ed80940220648fcb7bae73e09be4a63833fbb4daae7bf846cd57bcf4ddbfc6842dbec14283aaf8c6cc0bd1e1ccffcf3dc7", 0x82}, {&(0x7f00000007c0)="5651049ed7bc43f07116e5cd5cdee10e3e858c21932501e818637ab0f16bbece381a833a57923fe6402f085c62e7a972d63ca0c13c4fdf0c58b50b399333cb30b6206ee6ef4b243502d4fa22ca6246f16fbe1ee9c8194000ebe663c9f16975289ddb3aa33174eff877d85ed3c5eddc00fbceb28cd20472746360ada9d963eeac5510d7234ac68e852b70c12e7e2a", 0x8e}, {&(0x7f0000000340)="19872613971fbae1bf4d091fdf730ded3bec449d6aa2dfe1ee3c5ffb940827", 0x1f}], 0x3, 0x0, 0x0, 0x4000}, 0x6}, {{&(0x7f00000015c0)=@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001640)="f0a7eff8b15cb06a297be41e527083d6245f5baefbdf40d7a82953d478e5d4c8fc21643dca7dbb41b35f00e280fa8d607b2a46fdf34eb4ad1be3f157cd7f5406d4b0dc8b79dcdcbc3f5fcf21bae739e63660d56cd0007b7751fa3e4b643d104361507c5c52c413575f11169472218f078bf7714701ffc5a2569c7a086993d60c969c011a6eaeff2f8d41026f1415955d260aa5c1f92349", 0x97}, {&(0x7f0000001700)="4963253f2057c15ee16f53e079471260744382936e4397322903d8cfb90a450effd2fffb7c0853c237b9786a2fecbb6d735b0bbae3e71481fe4abb01ed57e2ea0f28f49650fcb77374fc7e081f1a0e9022d7", 0x52}, {&(0x7f0000000dc0)="67b08ccd65424472233b894dd4569a9fa6660553ed4cd05411a0a7cd4dac36576eaa719689b5038d6ccf0a4e55406c481403f1e352bb398483033a", 0x3b}], 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x40}, 0x7}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003b40)="8f08dc27e958b8cf7c4cdb100007d1d542fcc4263e67322c809bd4859ee696f424515c15a48a7e631f8e10e46a271d19f3bd5d0c2bf46546ca05f807a1e0df122238fbda0e2145f22752c47c034cbea315f45f29f4028227852405e6830d86", 0x5f}, {&(0x7f0000001000)="3d4bfb5e4c116b8833e1e736e46b998f06432b8112b5c13543455a4d2fb03a", 0x1f}, {&(0x7f0000003d00)="2bc8c9424f521e", 0x7}], 0x3, &(0x7f0000003dc0)=[{0x30, 0x103, 0x0, "4689db0b028b2d650c321639e32d8ab0bd0e4bfffd2310cd12"}, {0x88, 0x1ff, 0x9, "723fe2c88fee70f44dcc457617ab403356cad9847a123e0ec31148597f6315e84979eaf9ecb2a2556a0257519f01ecbc589dc8d25c6714ec03b1da10d19e2d9ab0b40cb09c6d4203ae51923670b52a07eb0ffc212f68d15824b70315470a0585b0adea0b6b5aad9b719f9dbeaa090c61efeada76da28"}, {0xb0, 0x104, 0x8, "23b81a52e01b207852652a4593434070986ba13bfd95b765823c54f75718fdd41f0e192ba61f661518a5276c10067877aeb7f8f04553f59a33358e7607b7c0a5d5761458ab7cfa913609773c622d617f0b3c5242b3d256550482d3bdb71d921c3850e8f0a20972082b401c330d18e58d06d68ca69d078e77a4eb4ac2856baa984ce3c951077ca6ca5fe19fa7fff22d169f207b4810371310d73cb965a529"}], 0x168, 0x800}}], 0x3, 0x40001) sendmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)="0206ba080967702fdab114", 0xb}], 0x1, &(0x7f00000032c0), 0x0, 0x40}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="3efea9f93ca2b01785cc83711e8a418b91dae37b965b28941bd52a154099c27efc807c6295233f484c4fa390", 0x2c}], 0x1}, 0x0) 2018/04/13 21:57:45 executing program 2: syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000340)=0x0) prctl$setptracer(0x59616d61, r2) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r3) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a3", 0x3, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) prctl$setptracer(0x59616d61, r2) 2018/04/13 21:57:45 executing program 7: prctl$intptr(0x1c, 0x3) mknod(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) execve(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000), &(0x7f0000001000)) 2018/04/13 21:57:45 executing program 3: prctl$seccomp(0x21, 0x40020000, &(0x7f0000000080)={0x7, &(0x7f00000000c0)=[{0x9, 0x4, 0x0, 0x8}, {0xfffffffffffffffa, 0xfe0, 0x8, 0x3ff}, {0x401, 0x64, 0x6, 0x8}, {0x1, 0xffff, 0x100, 0x1}, {0x4000000, 0x5, 0x3, 0x7fffffff}, {0x7, 0x1, 0x200800000, 0x3}, {0xf51, 0x3, 0x9, 0x3}]}) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005b1fd0)="e6210000000000000000030005000bfaf9f300010033c23cff00000000fe000225070097c11fd4e4c4dc5926a8000194", 0x30) r2 = dup3(r0, r1, 0x0) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x2, 0x4, "cd6eea9a6641200da583248a3faed470796a29fa4b8cf035abcceaf181b8dd4099efd8dded861d1604823f4ad28cec244ed592d94493b4ac073cff3562d817", 0x4}, 0x80) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4a000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x3e, 0x410, 0x70bd26, 0x25dfdbfc, {0xb}, [@generic="42d8573f3328be55c15c1df2bf934943ccabdb4e876dd350a75687d12bf2e586228000e1c803459cada8b7463f4b0aa88782a84da17eff755ab4d528c18e837c8ced"]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x100fff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x66, 0x0, 0x9, 0x9, 0x10, 0x2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002) 2018/04/13 21:57:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000180)}, 0x10043) recvmsg(r0, &(0x7f0000002080)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000001040), 0x0, &(0x7f0000001080)=""/4096, 0x1000}, 0x0) 2018/04/13 21:57:45 executing program 7: prctl$intptr(0x1c, 0x3) mknod(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) execve(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000), &(0x7f0000001000)) 2018/04/13 21:57:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x24, 0x2c, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @binary="085454a7a1"}]}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:57:45 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) 2018/04/13 21:57:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="66ba6100ec0f20d835080000000f22d86566adb8e10000000f23c00f21f835000009000f23f86467640f01720566b836000f00d00f71d0ca67679c36660f388078f966bad10466b8000066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:46 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x10000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc0, &(0x7f000079bffc), &(0x7f0000000200)=0x4) 2018/04/13 21:57:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000b56ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x3) r1 = accept(r0, 0x0, &(0x7f000069f000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) 2018/04/13 21:57:46 executing program 3: prctl$seccomp(0x21, 0x40020000, &(0x7f0000000080)={0x7, &(0x7f00000000c0)=[{0x9, 0x4, 0x0, 0x8}, {0xfffffffffffffffa, 0xfe0, 0x8, 0x3ff}, {0x401, 0x64, 0x6, 0x8}, {0x1, 0xffff, 0x100, 0x1}, {0x4000000, 0x5, 0x3, 0x7fffffff}, {0x7, 0x1, 0x200800000, 0x3}, {0xf51, 0x3, 0x9, 0x3}]}) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005b1fd0)="e6210000000000000000030005000bfaf9f300010033c23cff00000000fe000225070097c11fd4e4c4dc5926a8000194", 0x30) r2 = dup3(r0, r1, 0x0) bind(r1, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x2, 0x4, "cd6eea9a6641200da583248a3faed470796a29fa4b8cf035abcceaf181b8dd4099efd8dded861d1604823f4ad28cec244ed592d94493b4ac073cff3562d817", 0x4}, 0x80) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4a000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x3e, 0x410, 0x70bd26, 0x25dfdbfc, {0xb}, [@generic="42d8573f3328be55c15c1df2bf934943ccabdb4e876dd350a75687d12bf2e586228000e1c803459cada8b7463f4b0aa88782a84da17eff755ab4d528c18e837c8ced"]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x100fff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x66, 0x0, 0x9, 0x9, 0x10, 0x2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002) 2018/04/13 21:57:46 executing program 7: prctl$intptr(0x1c, 0x3) mknod(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) execve(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000), &(0x7f0000001000)) 2018/04/13 21:57:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/04/13 21:57:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="66ba6100ec0f20d835080000000f22d86566adb8e10000000f23c00f21f835000009000f23f86467640f01720566b836000f00d00f71d0ca67679c36660f388078f966bad10466b8000066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x24, 0x2c, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @binary="085454a7a1"}]}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:57:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) 2018/04/13 21:57:46 executing program 7: prctl$intptr(0x1c, 0x3) mknod(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) execve(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000), &(0x7f0000001000)) 2018/04/13 21:57:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:46 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/04/13 21:57:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="66ba6100ec0f20d835080000000f22d86566adb8e10000000f23c00f21f835000009000f23f86467640f01720566b836000f00d00f71d0ca67679c36660f388078f966bad10466b8000066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) 2018/04/13 21:57:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) 2018/04/13 21:57:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="66ba6100ec0f20d835080000000f22d86566adb8e10000000f23c00f21f835000009000f23f86467640f01720566b836000f00d00f71d0ca67679c36660f388078f966bad10466b8000066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:57:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000b56ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x3) r1 = accept(r0, 0x0, &(0x7f000069f000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) 2018/04/13 21:57:47 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x10000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc0, &(0x7f000079bffc), &(0x7f0000000200)=0x4) 2018/04/13 21:57:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/04/13 21:57:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:47 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0xf45}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 21:57:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/04/13 21:57:47 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0xf45}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 21:57:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:48 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/04/13 21:57:48 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/04/13 21:57:48 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x31, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f0000000040), &(0x7f0000000280), 0x8) ppoll(&(0x7f00005e1ff8)=[{r1}], 0x1, &(0x7f0000001000), &(0x7f0000001000)={0x1ff}, 0x8) dup3(r1, r0, 0x0) 2018/04/13 21:57:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000b56ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x3) r1 = accept(r0, 0x0, &(0x7f000069f000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) 2018/04/13 21:57:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/13 21:57:49 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0xf45}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 21:57:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:49 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/04/13 21:57:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001380)='/dev/audio\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/13 21:57:49 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x31, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f0000000040), &(0x7f0000000280), 0x8) ppoll(&(0x7f00005e1ff8)=[{r1}], 0x1, &(0x7f0000001000), &(0x7f0000001000)={0x1ff}, 0x8) dup3(r1, r0, 0x0) 2018/04/13 21:57:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/13 21:57:49 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0xf45}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/13 21:57:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:49 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/04/13 21:57:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/13 21:57:49 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/13 21:57:50 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/04/13 21:57:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/13 21:57:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"2ffee7256a41738fb2e3e2fbf032dcc2fa7d4d006cf0cb7d81e7681c12a0384de6a1a702a24518ad2113ecfe6e6af26f0ab87a78a5100ed708c3495cc753a15d7828c7108a02ba7520326733fd17fd8019678dd160fa89fea4965da1350a5b66b2678fba7ac618bc97e5adfe87f217140f311b2cc9cb446b38c69b6da67a6b8137ab29b99f8b8183c0cbdf1793b5279446abf132c1cd46981637fc38a1923f6605dff3ded88a2c34bc97a5379e41b4f3e0181e6b1ed6cd74e3f6116c8e86ab1b9b817e08e89a946bb5ba563dd7ba882fd0396a24f6bfd34e425fea443e35152321a65e3c6b015444b81b1b9abfd17f11a3ac19f9969de9d5f6b140332a5088d589cae3d8524f46ce425c014f3af695e150894e6ff402e6fc5566d7c6a77702d1114cd6e8f8d15fed59eed2e4bd74123ce0ca35e189a6bbdf662b772fc429f1577371976a310efd622d00938ca3319ea7dae75cc37d3fbd6a744bb35e79f6cc8eb507aff9b58fd8903a66b5c6548226ea60cfda9ade3f219b239ab4fc520f97c196b913cd6f4b7d38e8d793a2f3150f4d28789dedef406d4095f360f6932ee603e1babbe4aa9a65e04c4413871956e916c20d3a80fca939331666cda9b577a437a781b3ce33412960dbc92a65e269e222184411d8e5dbae0981568a2994fdb0b2a6e070a5403fd8907a2243119739799ea2216007b124fe12319604c608fa12ac8f6ac0ed3e953664f18faa5b43176dc3bf56ec4de878234b7682127586be24c9c4daec17fdf12f763c0c9997c5f7c5ce0b1c71c48f4cb691bbe50bef3648057d63ed3c52b43f722a6350ef9e0f2c330d23603a4d3194a4176ad3dc39370cf6cda5c20dc705f1ce704e5747a49155b9c60b03071cea800d5978a383c7678ccf0d8c08d17ddff7ec43af10982367447fa27a1032b9de7d2386fc31335bf694728875ef8928efa9b68d73fd265e0d90afff6b6f8c1bdf34980a76aae5489275bd9c7d51c8b5471465d018c365549bcc8bb468c2ae7d9a78ac61277737d1e04eeb1acd41fdb064675e6ed5606d1edebc92f75e9813317287d8eec8775be4a3d7a07f7e96ff3891dd58baaad7cea207bdeef2c4aed6dec40c09195a03fc39e2ee3208453d5fd4e77ce3d806ccc0ea300eeef5022fffe3d7d03f72d52750d8cddb1ae7756a58dcc5e3906facd680cac1b55aa9297de7d3ef9d1469dca4831aef9702bcd807388d9c7862e6736b22162fccee4656f43102c9ebed24d7251def1b9326ca12e2ecffee4a6d67484a88403c79c9afd8c2e95a239bd6536f273f5d4c599bf213117b64c7dbdf50868fbdd78c943c4d70d2b30767ad142ad9265b9f55d91f65071b6942abb7c5d3702b703acbb85f1d6b58eca7f468b0896acdc0b764338e226d7c901dc818b09439ba1a2ae7ef9b13936b2eecf1d1a7f4613556014cc5c073"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xffff}]}) 2018/04/13 21:57:50 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000200025f0071c01650e0ffc0e020020000000000000e1000c0800020000000005", 0x24) 2018/04/13 21:57:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001380)='/dev/audio\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/13 21:57:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000b56ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x3) r1 = accept(r0, 0x0, &(0x7f000069f000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) 2018/04/13 21:57:50 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x31, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f0000000040), &(0x7f0000000280), 0x8) ppoll(&(0x7f00005e1ff8)=[{r1}], 0x1, &(0x7f0000001000), &(0x7f0000001000)={0x1ff}, 0x8) dup3(r1, r0, 0x0) 2018/04/13 21:57:50 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00007ae000)=0x1, 0x28e) write(r1, &(0x7f0000000000)='f', 0x1) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x70, &(0x7f000001a000), 0x0, &(0x7f000001b000)}, 0x2) recvmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f0000001800)=@pptp={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/242, 0xf2}], 0x1, &(0x7f0000001c00)=""/171, 0xab}}], 0x1, 0x0, &(0x7f0000001dc0)) shutdown(r1, 0x1) 2018/04/13 21:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/04/13 21:57:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/13 21:57:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @empty, [{[], {0x8100}}], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "eac55f2424babae84552618f5ad4903c2d4f50677dad9beb80ec83eb189a948457f9735d9e81bee2b9a38f46031ad8e9d6d7367da5b0f49249544ad96db26844"}}}}, &(0x7f0000000380)) 2018/04/13 21:57:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x123, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x5}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/04/13 21:57:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/13 21:57:51 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xe0000000, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/13 21:57:51 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) prlimit64(0x0, 0x7, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000300)=""/100, 0x64) 2018/04/13 21:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/04/13 21:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/13 21:57:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001380)='/dev/audio\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/13 21:57:51 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x31, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f0000000040), &(0x7f0000000280), 0x8) ppoll(&(0x7f00005e1ff8)=[{r1}], 0x1, &(0x7f0000001000), &(0x7f0000001000)={0x1ff}, 0x8) dup3(r1, r0, 0x0) 2018/04/13 21:57:51 executing program 4: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000002, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/04/13 21:57:51 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x2}, 0x4) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/13 21:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/13 21:57:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}]}, 0x38}, 0x1}, 0x0) 2018/04/13 21:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/04/13 21:57:51 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000fff), 0x5) 2018/04/13 21:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/13 21:57:51 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0000000000000000000008ffee296be5a7fda398000000000000000000000000aa10000000"], 0x38}, 0x1}, 0x0) 2018/04/13 21:57:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000000efcc)={{0x3}}) close(r0) 2018/04/13 21:57:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}, &(0x7f0000000140)) 2018/04/13 21:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/04/13 21:57:52 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="9b", 0x1) close(r1) close(r0) 2018/04/13 21:57:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f66ff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x5) r1 = accept4(r0, &(0x7f0000000300)=ANY=[], &(0x7f0000000200), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2}}, 0x1}, 0x90) 2018/04/13 21:57:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001380)='/dev/audio\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/13 21:57:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) 2018/04/13 21:57:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5}, 0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000000803, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2018/04/13 21:57:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)="b2", 0x1}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/13 21:57:52 executing program 6: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@in={0x2, 0x4e22, @loopback=0x7f000001}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000017c0)}}, {{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000540)}}], 0x2, 0x0) 2018/04/13 21:57:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0x2, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0xfffffffffffffffd}, 0x98) 2018/04/13 21:57:52 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa}, 0x1c) dup3(r0, r1, 0x0) 2018/04/13 21:57:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)="b2", 0x1}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/13 21:57:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1800) 2018/04/13 21:57:52 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl(r0, 0x8b2b, &(0x7f0000000240)) 2018/04/13 21:57:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2}, {0x2, 0x0, @remote={0xac, 0xa, 0x14, 0xbb}}, {0x2, 0x0, @broadcast=0xffffffff}, 0x2}) 2018/04/13 21:57:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)="b2", 0x1}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/13 21:57:52 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:52 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x475}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 2018/04/13 21:57:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)="b2", 0x1}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/13 21:57:53 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:53 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1008005) socketpair(0x0, 0x4, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(r1, &(0x7f0000000640)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x6, @ipv4={[], [0xff, 0xff]}, 0x7}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000280)="0f8dc5324d4cc95509d9a7e3d72fe79f881ed2358f29f8b26b37d3528b2d85c3445dd68af934d2b1cd490b2384b6efa4fb6d0bdf724d318cb3c59365addb8b23693c39326084ac57e0bb144980f099d0b9616a664759fd9e5617f855a0bb646b175c3dcf48265622bcffb13bb67994da6a158cdd12bdda5208c0a749f0e7b910ba6ec3e44f3790ae640307f1c6d9befe126bdf7ea38cdab5843b7dc93d9700f9da3906faed4ce13e52dbae73dd34ba0a67896cc70ccaf864174f3605dda9b2fe0fb0e95106", 0xc5}], 0x1}, 0x44001) r2 = socket$inet_dccp(0x2, 0x6, 0x0) accept$inet(r2, &(0x7f0000000700)={0x0, 0x0, @dev}, &(0x7f0000000740)=0x10) sendmsg$netrom(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@full={{0x3, {"dfff3a9c9b4928"}}, [{"9960cd521a9b3d"}, {"6ffdbeb5e5f338"}, {"e05669676623c8"}, {"adbe5803d12f6e"}, {"d6f9ac4abc27c7"}, {"0408f4ee6e1ca1"}, {"34cd56948b531b"}, {"1ab7b74fff311f"}]}, 0x48, &(0x7f0000000140), 0x0, &(0x7f0000000800), 0x0, 0x800}, 0x20008041) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740), 0x17a}}], 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x2000000000000484, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) 2018/04/13 21:57:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000002740)={0x0, 0xffffffffffffffff}) connect$bt_rfcomm(r1, &(0x7f0000002780)={0x1f, {0x200, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xa) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)) 2018/04/13 21:57:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) bind(r0, &(0x7f0000f70000)=@un=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000c8e000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/04/13 21:57:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:53 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x140, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(r1) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x21800804}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="a31752362c41e173fc2bdc4255"], 0x1}, 0x1, 0x0, 0x0, 0xc011}, 0x800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x800010, 0xffffffffffffffff, 0x0) r3 = accept$alg(r1, 0x0, 0x0) socketpair(0x7, 0x8000a, 0x1, &(0x7f00000004c0)={0xffffffffffffffff}) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x80000400, &(0x7f000052cf69), &(0x7f0000000000), &(0x7f0000e9b000), &(0x7f0000ce4000)) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xe4, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x100000001}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xff}, @in6={0xa, 0x4e20, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0x11}, 0x7f}, @in6={0xa, 0x4e21, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, @in={0x2, 0x4e21, @multicast1=0xe0000001}]}, &(0x7f0000000140)=0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000200)={0xfffffffffffffffb, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000240)={0x6}) bind$rds(r4, &(0x7f0000000500)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r5}, 0x8) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) clock_nanosleep(0x9a993829505867a1, 0x1, &(0x7f0000000680)={0x0, 0x1c9c380}, &(0x7f00000006c0)) 2018/04/13 21:57:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000001700)="326465762f757362066f6e23000e910ac393c823fbad31ad0a937718e7a6718a33b868b435ba7153a8f7fcddc809ac92378df3700afb31e95ae89e4c1c27c2d437f4eff1a4aa268ddf2e63231df3e3b0220308a2013e0b630c1d4f223bf87a103984c3beb264a70786fe3123a50109a3c29bfca7657ea48e5cfdff6bb0fc1aef689d28a768e7887954bde07cc11cc069e3f6e5e26012") 2018/04/13 21:57:53 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e73", 0x38}], 0x1, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/13 21:57:53 executing program 3: syz_emit_ethernet(0x16b, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "563fa2", 0x135, 0x2f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, {[@dstopts={0x0, 0x2, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}, @hopopts={0x0, 0x0, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x0, 0x14, 0x0, 0x0, 0x0, [@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @empty, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6, 0xe2d4c3d9}, @timestamp={0x8, 0xa}, @eol, @exp_fastopen={0xfe, 0x14, 0xf989, "a52e8f04620085865f7cebc2ddb5ccb8"}, @eol, @md5sig={0x13, 0x12, "a36a0e970f0dc209a1812352306b72af"}, @timestamp={0x8, 0xa, 0x7a, 0x2}]}}, {"735d0164d8"}}}}}}}, &(0x7f0000000080)={0x1, 0x3, [0x0, 0x0, 0x0, 0x8000000000]}) 2018/04/13 21:57:53 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 21:57:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0xc2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001280)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)='"', 0x1}]) 2018/04/13 21:57:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=0xffffffff}}}}, 0x0) 2018/04/13 21:57:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000000)=0x24b) 2018/04/13 21:57:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='X', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r0}, &(0x7f0000000400)=""/90, 0x5a, 0x0) 2018/04/13 21:57:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045431, 0x10000001000000) 2018/04/13 21:57:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000000)=0x24b) 2018/04/13 21:57:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000e80)=@ethtool_per_queue_op={0x4b}}) 2018/04/13 21:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000000)=0x24b) 2018/04/13 21:57:54 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002e8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd", 0x4) write(r1, &(0x7f00001eaf7c)="d33e3ac1792bbce4d7f62d063a492bc83d59408649b981c2d0e252ec8e311c2c5558503f65a3dac5a7bc6305c80648370caa813da5b8102d6276f941052004f101bc99f4bb70da53ff5e143cc3716651c12a1a70ab796231ead171a904fdc483", 0x60) read(r1, &(0x7f0000000000)=""/186, 0xba) 2018/04/13 21:57:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='X', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r0}, &(0x7f0000000400)=""/90, 0x5a, 0x0) 2018/04/13 21:57:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000cdefab)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080021000c00000000000000002028f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000528000)}, 0x0) 2018/04/13 21:57:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/91, 0x286) 2018/04/13 21:57:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:54 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/13 21:57:54 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) io_setup(0x80, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='n', 0x1}]) 2018/04/13 21:57:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='X', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r0}, &(0x7f0000000400)=""/90, 0x5a, 0x0) 2018/04/13 21:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000000)=0x24b) 2018/04/13 21:57:54 executing program 2: r0 = inotify_init1(0x0) fsetxattr(r0, &(0x7f000045e000)=@random={'security.\x00', '-\x00'}, &(0x7f000029b000)='-[security{!![\x00', 0xf, 0x0) 2018/04/13 21:57:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}}, 0x241) 2018/04/13 21:57:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000013000/0x4000)=nil, 0x300120}) 2018/04/13 21:57:54 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000000c0)=""/155) dup3(r1, r0, 0x0) 2018/04/13 21:57:54 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f00004d4000)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00005a3000), 0x4) r1 = dup2(r0, r0) sendmmsg$inet_sctp(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f0000000100)}], 0x1, 0x0) 2018/04/13 21:57:54 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/04/13 21:57:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='X', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r0}, &(0x7f0000000400)=""/90, 0x5a, 0x0) 2018/04/13 21:57:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/04/13 21:57:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000a575bb)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @random="4cd53a5ecd3b"}, 0x14) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) 2018/04/13 21:57:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000a575bb)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:54 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc0189436, &(0x7f0000006ffc)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0xfffffffffffffffa}) 2018/04/13 21:57:54 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x0) 2018/04/13 21:57:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001000)={0x3, &(0x7f0000007000)=[{}, {}, {}]}) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 2018/04/13 21:57:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x50d, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/160, 0x2f5}, {&(0x7f00000001c0)=""/179}, {&(0x7f0000000040)=""/56}, {&(0x7f0000000540)=""/100, 0x358}, {&(0x7f0000000300)=""/172}, {&(0x7f00000003c0)=""/218, 0x394}], 0x100000000000009c, 0x0) 2018/04/13 21:57:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000a575bb)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 5: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) sendfile(r0, r1, &(0x7f0000b4bff8), 0x100000002) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/04/13 21:57:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@bridge_getlink={0x28, 0x12, 0x301, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3}]}, 0x3f3}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/04/13 21:57:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)=""/250) 2018/04/13 21:57:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00595decff21a0c4ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/13 21:57:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000a575bb)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') mount(&(0x7f0000000080)='.', &(0x7f0000852000)='.', &(0x7f0000000180)='mqueue\x00', 0x0, &(0x7f0000000040)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 21:57:55 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') dup2(r0, r1) 2018/04/13 21:57:55 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, &(0x7f0000000000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/13 21:57:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:57:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000e99000), 0x1ed) 2018/04/13 21:57:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/13 21:57:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:58:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000140)=0xff4b, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 2018/04/13 21:58:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)) 2018/04/13 21:58:05 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000060a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000016fd0)={0x14, 0x26, 0x301}, 0x14}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, [0x1, 0x2, 0x1, 0x7, 0x0, 0x1e6e, 0x0, 0xffffffffffffff7f, 0x0, 0x5, 0x80000000, 0x3]}, &(0x7f0000000900)=0x100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000680)={0x0, 0x0, r1}, &(0x7f00000006c0)=""/245, 0xf5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/04/13 21:58:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1}, 0x0) 2018/04/13 21:58:05 executing program 6: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001b40)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x200015c0, 0x0, 0x0, 0x200017c0, 0x200017f0], 0x0, &(0x7f0000001580), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]}, 0x2d8) 2018/04/13 21:58:05 executing program 5: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000ca6000), &(0x7f0000ca6ffc)) 2018/04/13 21:58:05 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) [ 644.871865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/13 21:58:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000016edc)={0x14, 0x25, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/13 21:58:05 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000060a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000002ffc)=""/4, &(0x7f0000000000)=0x4) 2018/04/13 21:58:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000016fd0)={0x14, 0x26, 0x301}, 0x14}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, [0x1, 0x2, 0x1, 0x7, 0x0, 0x1e6e, 0x0, 0xffffffffffffff7f, 0x0, 0x5, 0x80000000, 0x3]}, &(0x7f0000000900)=0x100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000680)={0x0, 0x0, r1}, &(0x7f00000006c0)=""/245, 0xf5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/04/13 21:58:05 executing program 4: socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "fca967e17f791010"}}}}}}}, 0x0) [ 645.032224] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/13 21:58:05 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) dup3(r0, r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:05 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000060a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) [ 645.162105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/13 21:58:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x28, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:58:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000006e00)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(twofish-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000006c80)=[{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f00000069c0)="df0a76551677fe2b999a5877fbb563fdc798dc6ce2afa279926097216eeaa37606", 0x21}], 0x1, &(0x7f0000006b00)}], 0x1, 0x0) 2018/04/13 21:58:06 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000060a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:06 executing program 4: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fstatfs(r0, &(0x7f0000001600)=""/41) 2018/04/13 21:58:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="a16e8aa67acf", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "52cdfa", 0x28, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @enc_lim={0x4, 0x1}, @jumbo={0xc2, 0x4}, @ra={0x5, 0x2}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b1ee68", 0x0, "6a629a"}}}}}}}, &(0x7f000038eff4)) 2018/04/13 21:58:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000016fd0)={0x14, 0x26, 0x301}, 0x14}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, [0x1, 0x2, 0x1, 0x7, 0x0, 0x1e6e, 0x0, 0xffffffffffffff7f, 0x0, 0x5, 0x80000000, 0x3]}, &(0x7f0000000900)=0x100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000680)={0x0, 0x0, r1}, &(0x7f00000006c0)=""/245, 0xf5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/04/13 21:58:06 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/04/13 21:58:06 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) dup3(r0, r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 645.834839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/13 21:58:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae9c, &(0x7f0000000040)=ANY=[@ANYBLOB="01000009"]) 2018/04/13 21:58:06 executing program 4: r0 = socket(0x15, 0x80005, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000569fd0)={@ipx={0x4, 0x0, 0x0, "8bc50f1a4618"}, {&(0x7f0000678f6d)=""/147, 0x93}, &(0x7f0000661fff)}, 0x30) 2018/04/13 21:58:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000040)=[{0x3, 0x100}, {0x0, 0x8e65}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x7fff]) 2018/04/13 21:58:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000016fd0)={0x14, 0x26, 0x301}, 0x14}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, [0x1, 0x2, 0x1, 0x7, 0x0, 0x1e6e, 0x0, 0xffffffffffffff7f, 0x0, 0x5, 0x80000000, 0x3]}, &(0x7f0000000900)=0x100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000680)={0x0, 0x0, r1}, &(0x7f00000006c0)=""/245, 0xf5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/04/13 21:58:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="a16e8aa67acf", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "52cdfa", 0x28, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @enc_lim={0x4, 0x1}, @jumbo={0xc2, 0x4}, @ra={0x5, 0x2}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b1ee68", 0x0, "6a629a"}}}}}}}, &(0x7f000038eff4)) 2018/04/13 21:58:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x80000000, 0x7ff, 0x6dee, 0x0, 0x0, [], [], [], 0x8b0b, 0x5}) 2018/04/13 21:58:06 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) dup3(r0, r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d3ad1343ab27191a01002356b2602dff05", 0x11) 2018/04/13 21:58:06 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af10, &(0x7f0000000080)) 2018/04/13 21:58:07 executing program 1: syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/04/13 21:58:07 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) dup3(r0, r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:07 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/13 21:58:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002480)="291a12956b6849ca54c071e25f969b07", 0x10}], 0x1, &(0x7f00000013c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/13 21:58:07 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@nfc, &(0x7f0000000380)=0x80, 0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)={0x0, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r1, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000004d00)=[{&(0x7f0000000440)={0x27, 0x1, 0x0, 0x7, 0x0, 0x0, "39298f6275497df1f20c6aca3bf5d34654a93329c08a0c7eed00c403a6435194c60cfe68ebd8e38cdfb5a40f9f95344c69360b9c9f680fa4c0261b87524a1d", 0x1f}, 0x60, &(0x7f0000000880)}], 0x1, 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000001c0)=""/145) r2 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000001c40)) getresgid(&(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001d80)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001e80)=0xe8) getresgid(&(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40)) fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002480)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002580)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000025c0)) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002640)={{{@in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000002740)=0xe8) getgroups(0x1, &(0x7f0000002780)=[0x0]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000027c0)) geteuid() getgroups(0x0, &(0x7f0000002100)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003280)) getuid() fstat(0xffffffffffffffff, &(0x7f00000032c0)) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003840)={{{@in, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000003940)=0xe8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003a40)) fstat(0xffffffffffffffff, &(0x7f00000041c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003b00), &(0x7f0000003b40)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004000)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000580)="3290208eb8850decd59dd800a27df6c48d161b1aa9d77d775474c8ea3e3fac38df46eae5fb4ce118211e5e4717ce0f4482d490176bf887df97ea58a1c1355f9389aa89d638d16db64faae160b571c9ea7130840a6da34e4bfce196ed1911f34569ecd7b621cc468a4e", 0x69}], 0x1, &(0x7f0000001f80), 0x0, 0x90}], 0x1, 0x48080) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000a80)="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", 0xfb9) close(0xffffffffffffffff) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000004ec0), 0x3b3, 0x3, &(0x7f0000004f00)={0x0, 0x989680}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000be2f7d)=""/131, 0xfffffffffffffffd, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='ns/cgroup\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, {0x30, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) request_key(&(0x7f0000000700)='ceph\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000780)='eth0ppp0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x9}, &(0x7f0000000080)=0x14) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0), 0x200000000000006c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000800)={0x2}) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x1000000, 0x11, r3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)=ANY=[]}, 0x1}, 0x0) 2018/04/13 21:58:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x80000000, 0x7ff, 0x6dee, 0x0, 0x0, [], [], [], 0x8b0b, 0x5}) 2018/04/13 21:58:07 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="a16e8aa67acf", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "52cdfa", 0x28, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @enc_lim={0x4, 0x1}, @jumbo={0xc2, 0x4}, @ra={0x5, 0x2}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b1ee68", 0x0, "6a629a"}}}}}}}, &(0x7f000038eff4)) 2018/04/13 21:58:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="96", 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8000, 0x5, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7f, 0x200, 0x8, 0xff}}], 0x60, 0xffffffffffffffff}, {&(0x7f0000000000)=@in={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x200040c1) [ 647.011062] IPv4: Oversized IP packet from 127.0.0.1 2018/04/13 21:58:07 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) mq_notify(r0, &(0x7f0000932fa0)={0x0, 0x0, 0x1}) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000066cff0)) 2018/04/13 21:58:07 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="2400000024007f380000120000000100000ff6ff01000000ff070000000000001300ff10", 0x24) 2018/04/13 21:58:07 executing program 4: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x20}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x8, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) 2018/04/13 21:58:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x80000000, 0x7ff, 0x6dee, 0x0, 0x0, [], [], [], 0x8b0b, 0x5}) 2018/04/13 21:58:07 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="a16e8aa67acf", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "52cdfa", 0x28, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @enc_lim={0x4, 0x1}, @jumbo={0xc2, 0x4}, @ra={0x5, 0x2}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b1ee68", 0x0, "6a629a"}}}}}}}, &(0x7f000038eff4)) 2018/04/13 21:58:07 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000039d18)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xfffffffa, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000025000), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x0, 0x0, "50345fc21378bc8f6da6263e3715f555f23e413a61787ecaea02755a391d"}}}], {{[], 0x0, 0x252, 0xd0}, {0x29f, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c) 2018/04/13 21:58:07 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 2018/04/13 21:58:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="85a970b0146b", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/13 21:58:07 executing program 1: creat(&(0x7f00007e2ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f14ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$int_out(r0, 0xc0189436, &(0x7f000000a000)) 2018/04/13 21:58:07 executing program 2: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) 2018/04/13 21:58:07 executing program 7: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00007e2000), &(0x7f00006cd000)=0x8) 2018/04/13 21:58:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x80000000, 0x7ff, 0x6dee, 0x0, 0x0, [], [], [], 0x8b0b, 0x5}) 2018/04/13 21:58:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5420, &(0x7f0000000040)) 2018/04/13 21:58:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000cfb000), &(0x7f000091a000)=0x4) 2018/04/13 21:58:08 executing program 7: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x40000000000c1371}) bpf$PROG_LOAD(0x5, &(0x7f00007c9000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea5c, 0x2c5, &(0x7f000000a000)=""/195}, 0x48) 2018/04/13 21:58:08 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40046103, &(0x7f00000000c0)) 2018/04/13 21:58:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2d, 0xaff, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/13 21:58:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000039d18)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xfffffffa, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000025000), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x0, 0x0, "50345fc21378bc8f6da6263e3715f555f23e413a61787ecaea02755a391d"}}}], {{[], 0x0, 0x252, 0xd0}, {0x29f, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c) 2018/04/13 21:58:08 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @rand_addr}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) dup2(r1, r0) 2018/04/13 21:58:08 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup(r0) setsockopt(r1, 0x10d, 0x2, &(0x7f00000000c0)="032efcf75a69c6e5", 0x8) 2018/04/13 21:58:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000000380)="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", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000002d80)=@ipx, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000004000)=""/170, 0xaa}}], 0x1, 0x0, 0x0) 2018/04/13 21:58:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) close(r0) memfd_create(&(0x7f0000000040)="112c736563757269747970726f632e2e00", 0x2) fcntl$addseals(r0, 0x409, 0x0) 2018/04/13 21:58:08 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/04/13 21:58:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000740)={{0x80}, "706f727431000000000000000000000000000000000000000100eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 21:58:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000039d18)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xfffffffa, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000025000), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x0, 0x0, "50345fc21378bc8f6da6263e3715f555f23e413a61787ecaea02755a391d"}}}], {{[], 0x0, 0x252, 0xd0}, {0x29f, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c) 2018/04/13 21:58:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000001e00)}}], 0x1, 0x8083) sendmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{&(0x7f0000000580)=@ax25={0x3, {"1425586b1223eb"}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000001e00)}}], 0x2, 0x0) 2018/04/13 21:58:09 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) 2018/04/13 21:58:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000030ff8)='pagemap\x00') lseek(r0, 0x0, 0x3) 2018/04/13 21:58:09 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(r1, r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x81) dup2(r0, r2) 2018/04/13 21:58:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000039d18)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xfffffffa, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000025000), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x0, 0x0, "50345fc21378bc8f6da6263e3715f555f23e413a61787ecaea02755a391d"}}}], {{[], 0x0, 0x252, 0xd0}, {0x29f, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c) 2018/04/13 21:58:09 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xc0ffffff, 0x2, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f00000000c0)) 2018/04/13 21:58:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x26, 0x10100000000003, 0x0, 0x0, {0x3}, [@nested={0xc, 0x4001, [@generic="7bec23dd6b"]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 21:58:09 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="220000001800071100be0000090007000a00013f0000000900f8ff0005000280ff45", 0x22) [ 649.463739] IPv6: Can't replace route, no match found 2018/04/13 21:58:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x4000000000000008}], 0x10}}], 0x2, 0x0) 2018/04/13 21:58:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) close(r0) 2018/04/13 21:58:10 executing program 4: getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000220000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000003ff4)) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r4, r3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = dup3(r5, r2, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000753000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0fc7280f080f20030f01727166ba4200b834000000ef66bad10466edb81da1fb500f23d00f21f835300000050f23f8c4c3194bfc360f20030fc76d08", 0x3c}], 0x1, 0x7, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000880)) 2018/04/13 21:58:10 executing program 1: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./control\x00', 0x10fe, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/04/13 21:58:10 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000a000)=""/193, 0x41}, {&(0x7f0000006fc3)=""/61, 0x47}], 0x5b, &(0x7f0000004f99)=""/103, 0x67}}], 0x1, 0x0, &(0x7f0000002ff0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x4}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/04/13 21:58:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x100008001, 0x4) bind$inet6(r1, &(0x7f0000002000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x4e20}], 0x10) dup2(r0, r2) 2018/04/13 21:58:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@dev}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_setlink={0x28, 0x13, 0xe09, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x1f}]}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:58:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) 2018/04/13 21:58:10 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'sit0\x00', {0x2}}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x9, 0x5}) 2018/04/13 21:58:10 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x7}) 2018/04/13 21:58:10 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0x40000000000000ff) dup3(r0, r1, 0x0) 2018/04/13 21:58:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000500)=@expire={0x104, 0x18, 0x401, 0x0, 0x0, {{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0xff}, @in=@loopback=0x7f000001, {0x0, 0x0, 0x3}, {}, {0x0, 0x80000001, 0xffffffff80000001}, 0x70bd2a}}, [@mark={0xc, 0x15}]}, 0x104}, 0x1}, 0x0) 2018/04/13 21:58:10 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) fallocate(r0, 0x0, 0x4b99, 0x5) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) preadv(r0, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/82, 0xffffff67}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)}], 0x5, 0x0) sync_file_range(r1, 0x0, 0x0, 0x3) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000004040)='\n', 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000006740)) 2018/04/13 21:58:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}, [], {0x95}}, &(0x7f0000000200)="f4206cd55d3174fccd51d063ca3dda5cbf5a01cc7ea92c43b604ffc53727d2d60f55ddeb757cf36a8457125ab48bcbcce4011a423df186cc8d8e6e9a66b1a0a6035a2fc0578cf5aad8b3a24a9c646a37eb26c6212ffc9658f1520187f16f1c13380b3083ffde51b4194b880765d169d550beb059984a10c2", 0x1, 0xf5, &(0x7f0000000080)=""/153}, 0x48) 2018/04/13 21:58:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x67) listen(r0, 0x87) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000918000)=0x9) 2018/04/13 21:58:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x5}, [], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f00000001c0)=""/153}, 0x48) 2018/04/13 21:58:11 executing program 7: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000068b000)='./file0\x00', 0x0) r0 = open(&(0x7f0000f14ff8)='./file0\x00', 0x0, 0x0) ioctl$int_out(r0, 0xc0189436, &(0x7f000000a000)) 2018/04/13 21:58:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xffff, 0x3a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/13 21:58:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) 2018/04/13 21:58:11 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x7}) [ 650.734522] x86/PAT: syz-executor5:2255 map pfn RAM range req write-combining for [mem 0x1af7d0000-0x1af7d3fff], got write-back [ 650.783414] x86/PAT: syz-executor5:2258 map pfn RAM range req write-combining for [mem 0x1af7d0000-0x1af7d3fff], got write-back 2018/04/13 21:58:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="70d41b1b8237f94a1946983a3d9bf180cd6dc32d15a9556fca799b26e40db8beebc31a2f5398a63be25f2d65aebf4a47aa7a4c4ea260b36ef4bdc65126d0606e5f10850dc453adf580ee9da1b56c6d1a68cf4a12ed23f4c9ecdd877c457dff84a6ddf8054df832a0c0e48c5772f15ed48dd429b97623c3af8886339a2611631a002430c81885ea501a6dd6e7cbc234feb8d6a095d40673343b461e5dcba9b112335000922e01cc5addde938f0a00c28acb22a6f834660248d787110d2d8d89e498e3b8a70390d588a56195d1e7ac73010463f9d205674917e3e264e505f6b908a8f31e56c5aef27325580f085e7db235e623bac691a526b7feb9df781f112b716d23d425ec2bf697c10c92e9a422ae6fba3f7b2ae68f6179b3aa8a2ddc8f2c86c4e1096bdc9408aa755b21928174f61189c14afd442d2f0702d86498b66681d129bd74114185f673ac3ad74e4e9d3761e5d2dfd83af06df20820167e74374c7e124396b1e38aa24880689413743d045a26aeab55ae5872d62ff81f38302d1dcc0ad4e3b2e9c570accb3abd6f569f9c709ed651316ec30562196c98c97899c418537aef0713b687c3f1b585f303a9a14293e4ba806494827a349e255e7c2416d0d27d609f3cf61d757d5fc07f6c53561f034445aebbe6881909a5823c52d5435bc95e4ca4342b0a92ccd676ee37d35e75689d2cf6897b576aec9a5c5886a5d5fafb09cfbe3740e8d5ca9d5d3687d855109468e2ee753ff1ee8e3a14dde2d59f905724c3dbb23448a02edd13f8a8857486401e8cf76e20f42cb23c5bddd9ea5a4c9f75640b90cfa1609ee6134cdc37df37dea1f43a181143f537329050421a00a73601ed610f333a8738a05a541966b71aecd671ab5a38fa6cc11b8e79212cfcef1d41ddfeed559455365c5dcdf77b74c846562385129d346469928ce33fb70dfc8124e416841cb98650b70e4e36e6b42ce79e8cdd2b077f73a17831ca71032d48208be907799735435fc0f69850daf9a3a4fb36d6c200a5a6fcb0fae791d06e5744340c5d33a636a287df8d4dfe86d4fc316af321aaa76045d9eb334298e9e692c569305af755d53449802a66594830a11ca10104253a88bf5cdcab8ac311bceef44c0fe67e4bc8974f240bfc8a55d7a4f350f6c843fb4b2b8293c219ee628d1c795f7451a561941985c245b95a8c1f40705a3bf6b1b7879f197d5f325d07a94c5bb3c6e1660ea80501ca1b3472f189bae7b22bd3f071aded32c3cd37e345ed7cfbf5414d4063e36fc7e2ae10ee173d86b0683e222c1c5c972d9af51434784d9d85bb68650a0810e09f41e1db807718f2ce60fc1e06f20fc1a6673683858264c7", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:11 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000058790)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f00004a1000)=[{{}, 0x11, 0x100}], 0x18) 2018/04/13 21:58:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) fallocate(r0, 0x0, 0x4b99, 0x5) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) preadv(r0, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/82, 0xffffff67}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)}], 0x5, 0x0) sync_file_range(r1, 0x0, 0x0, 0x3) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000004040)='\n', 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000006740)) 2018/04/13 21:58:11 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x7}) 2018/04/13 21:58:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00005aeff6)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xfffffffffffffffe) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/04/13 21:58:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) 2018/04/13 21:58:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x67) listen(r0, 0x87) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000918000)=0x9) 2018/04/13 21:58:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/13 21:58:12 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/04/13 21:58:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000acf000)='ns/mnt\x00') ioctl$VT_RELDISP(r0, 0xb701) 2018/04/13 21:58:12 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) fallocate(r0, 0x0, 0x4b99, 0x5) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) preadv(r0, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/82, 0xffffff67}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)}], 0x5, 0x0) sync_file_range(r1, 0x0, 0x0, 0x3) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000004040)='\n', 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000006740)) 2018/04/13 21:58:12 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x7}) 2018/04/13 21:58:12 executing program 5: r0 = socket$inet(0x10, 0x400000000000003, 0x0) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="4c0000001200ff09f7fefd956fa2830007a6008000000000000000683540150007001d0004c41180b598bc593ab6c21148a730de33a49868c62b34a654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/13 21:58:12 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) fallocate(r0, 0x0, 0x4b99, 0x5) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) preadv(r0, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/82, 0xffffff67}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)}], 0x5, 0x0) sync_file_range(r1, 0x0, 0x0, 0x3) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000004040)='\n', 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000006740)) [ 651.868016] netlink: 'syz-executor5': attribute type 29 has an invalid length. 2018/04/13 21:58:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x67) listen(r0, 0x87) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000918000)=0x9) 2018/04/13 21:58:12 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000000080)=0x80, 0x2a47ff56) 2018/04/13 21:58:12 executing program 1: r0 = memfd_create(&(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x0) fstatfs(r0, &(0x7f0000000100)=""/176) 2018/04/13 21:58:12 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00001aa000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x1, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000603000)) 2018/04/13 21:58:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000480)="0fc718f4f0861566b8a79212b40f23c00f21f8663501000a000f23f80f0f64a4aebaa100b078ee67650fae71006766c7442400540000006766c74424028db6f2026766c744240600000000670f011c2466b9cb0a000066b872e9000066ba000000000f306766c7442400427100006766c74424020e0000006766c744240600000000670f011c24", 0x87}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000008000000d97e3f7a66f5d8890000000000000000004000000000000000672b00e0ff00000096d700000000fffeffffffffffff0000000700000000000000080000000079ac1bc1de4e6ca101e843001a00ffffff7f000000000000000000000001011731b2b6864fb93cc13fe8692bddbcd39a42a5"]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) 2018/04/13 21:58:13 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000000080)=0x80, 0x2a47ff56) 2018/04/13 21:58:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) 2018/04/13 21:58:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) 2018/04/13 21:58:13 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000140)='"', 0x1}]) 2018/04/13 21:58:13 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000000080)=0x80, 0x2a47ff56) 2018/04/13 21:58:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) [ 652.721932] kvm: pic: single mode not supported [ 652.721944] kvm: pic: level sensitive irq not supported [ 652.739567] kvm: pic: single mode not supported 2018/04/13 21:58:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) 2018/04/13 21:58:13 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000000080)=0x80, 0x2a47ff56) 2018/04/13 21:58:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) 2018/04/13 21:58:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000480)="0fc718f4f0861566b8a79212b40f23c00f21f8663501000a000f23f80f0f64a4aebaa100b078ee67650fae71006766c7442400540000006766c74424028db6f2026766c744240600000000670f011c2466b9cb0a000066b872e9000066ba000000000f306766c7442400427100006766c74424020e0000006766c744240600000000670f011c24", 0x87}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000008000000d97e3f7a66f5d8890000000000000000004000000000000000672b00e0ff00000096d700000000fffeffffffffffff0000000700000000000000080000000079ac1bc1de4e6ca101e843001a00ffffff7f000000000000000000000001011731b2b6864fb93cc13fe8692bddbcd39a42a5"]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:13 executing program 6: perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x0, 0xffffffff}}) 2018/04/13 21:58:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = memfd_create(&(0x7f00000006c0)="237d00d3fc1ee4671fbaa0a4c6dfb7128b8e96f7fd829d4d39f1828ebf764f5077e22cbbc52b4c4f8d000000000000000000cbc045a996411e646083b96f3e8c6eea18f7b2e2e0974e113319b3fe14b8014b3897318bcffadcc45549ad003dd8e55b1e535a5884ea779cc2f5b4e661bd27ae6412a713a1c8e31b5b827fb084a333e3a520822842a0c2d797f2dd7b9d082fcb3f2ce7d2eaf9f667019a07dcb67c443a64f4e0e445aebd6b1f5baed9a6d6", 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x7ffff) 2018/04/13 21:58:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) name_to_handle_at(r1, &(0x7f0000000140)='..', &(0x7f0000000380)={0x8}, &(0x7f0000000200), 0x0) 2018/04/13 21:58:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="70d41b1b8237f94a1946983a3d9bf180cd6dc32d15a9556fca799b26e40db8beebc31a2f5398a63be25f2d65aebf4a47aa7a4c4ea260b36ef4bdc65126d0606e5f10850dc453adf580ee9da1b56c6d1a68cf4a12ed23f4c9ecdd877c457dff84a6ddf8054df832a0c0e48c5772f15ed48dd429b97623c3af8886339a2611631a002430c81885ea501a6dd6e7cbc234feb8d6a095d40673343b461e5dcba9b112335000922e01cc5addde938f0a00c28acb22a6f834660248d787110d2d8d89e498e3b8a70390d588a56195d1e7ac73010463f9d205674917e3e264e505f6b908a8f31e56c5aef27325580f085e7db235e623bac691a526b7feb9df781f112b716d23d425ec2bf697c10c92e9a422ae6fba3f7b2ae68f6179b3aa8a2ddc8f2c86c4e1096bdc9408aa755b21928174f61189c14afd442d2f0702d86498b66681d129bd74114185f673ac3ad74e4e9d3761e5d2dfd83af06df20820167e74374c7e124396b1e38aa24880689413743d045a26aeab55ae5872d62ff81f38302d1dcc0ad4e3b2e9c570accb3abd6f569f9c709ed651316ec30562196c98c97899c418537aef0713b687c3f1b585f303a9a14293e4ba806494827a349e255e7c2416d0d27d609f3cf61d757d5fc07f6c53561f034445aebbe6881909a5823c52d5435bc95e4ca4342b0a92ccd676ee37d35e75689d2cf6897b576aec9a5c5886a5d5fafb09cfbe3740e8d5ca9d5d3687d855109468e2ee753ff1ee8e3a14dde2d59f905724c3dbb23448a02edd13f8a8857486401e8cf76e20f42cb23c5bddd9ea5a4c9f75640b90cfa1609ee6134cdc37df37dea1f43a181143f537329050421a00a73601ed610f333a8738a05a541966b71aecd671ab5a38fa6cc11b8e79212cfcef1d41ddfeed559455365c5dcdf77b74c846562385129d346469928ce33fb70dfc8124e416841cb98650b70e4e36e6b42ce79e8cdd2b077f73a17831ca71032d48208be907799735435fc0f69850daf9a3a4fb36d6c200a5a6fcb0fae791d06e5744340c5d33a636a287df8d4dfe86d4fc316af321aaa76045d9eb334298e9e692c569305af755d53449802a66594830a11ca10104253a88bf5cdcab8ac311bceef44c0fe67e4bc8974f240bfc8a55d7a4f350f6c843fb4b2b8293c219ee628d1c795f7451a561941985c245b95a8c1f40705a3bf6b1b7879f197d5f325d07a94c5bb3c6e1660ea80501ca1b3472f189bae7b22bd3f071aded32c3cd37e345ed7cfbf5414d4063e36fc7e2ae10ee173d86b0683e222c1c5c972d9af51434784d9d85bb68650a0810e09f41e1db807718f2ce60fc1e06f20fc1a6673683858264c7", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x67) listen(r0, 0x87) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000918000)=0x9) 2018/04/13 21:58:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r5, &(0x7f0000edffc8)={0x0, 0xfffffffc, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="70d41b1b8237f94a1946983a3d9bf180cd6dc32d15a9556fca799b26e40db8beebc31a2f5398a63be25f2d65aebf4a47aa7a4c4ea260b36ef4bdc65126d0606e5f10850dc453adf580ee9da1b56c6d1a68cf4a12ed23f4c9ecdd877c457dff84a6ddf8054df832a0c0e48c5772f15ed48dd429b97623c3af8886339a2611631a002430c81885ea501a6dd6e7cbc234feb8d6a095d40673343b461e5dcba9b112335000922e01cc5addde938f0a00c28acb22a6f834660248d787110d2d8d89e498e3b8a70390d588a56195d1e7ac73010463f9d205674917e3e264e505f6b908a8f31e56c5aef27325580f085e7db235e623bac691a526b7feb9df781f112b716d23d425ec2bf697c10c92e9a422ae6fba3f7b2ae68f6179b3aa8a2ddc8f2c86c4e1096bdc9408aa755b21928174f61189c14afd442d2f0702d86498b66681d129bd74114185f673ac3ad74e4e9d3761e5d2dfd83af06df20820167e74374c7e124396b1e38aa24880689413743d045a26aeab55ae5872d62ff81f38302d1dcc0ad4e3b2e9c570accb3abd6f569f9c709ed651316ec30562196c98c97899c418537aef0713b687c3f1b585f303a9a14293e4ba806494827a349e255e7c2416d0d27d609f3cf61d757d5fc07f6c53561f034445aebbe6881909a5823c52d5435bc95e4ca4342b0a92ccd676ee37d35e75689d2cf6897b576aec9a5c5886a5d5fafb09cfbe3740e8d5ca9d5d3687d855109468e2ee753ff1ee8e3a14dde2d59f905724c3dbb23448a02edd13f8a8857486401e8cf76e20f42cb23c5bddd9ea5a4c9f75640b90cfa1609ee6134cdc37df37dea1f43a181143f537329050421a00a73601ed610f333a8738a05a541966b71aecd671ab5a38fa6cc11b8e79212cfcef1d41ddfeed559455365c5dcdf77b74c846562385129d346469928ce33fb70dfc8124e416841cb98650b70e4e36e6b42ce79e8cdd2b077f73a17831ca71032d48208be907799735435fc0f69850daf9a3a4fb36d6c200a5a6fcb0fae791d06e5744340c5d33a636a287df8d4dfe86d4fc316af321aaa76045d9eb334298e9e692c569305af755d53449802a66594830a11ca10104253a88bf5cdcab8ac311bceef44c0fe67e4bc8974f240bfc8a55d7a4f350f6c843fb4b2b8293c219ee628d1c795f7451a561941985c245b95a8c1f40705a3bf6b1b7879f197d5f325d07a94c5bb3c6e1660ea80501ca1b3472f189bae7b22bd3f071aded32c3cd37e345ed7cfbf5414d4063e36fc7e2ae10ee173d86b0683e222c1c5c972d9af51434784d9d85bb68650a0810e09f41e1db807718f2ce60fc1e06f20fc1a6673683858264c7", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/13 21:58:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x8, 0x0, "7c6466b48e820ef5080e1706c24e1d02d7136e029bfe6fdeeed6db357e9818f0373f71c64cfcbfd93e6e525164337a97345146790fd3f0b4bd8455577279239c61e2fe16a59f804b41c845ac9d947213"}, 0xd8) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) 2018/04/13 21:58:14 executing program 6: r0 = socket$inet(0x11, 0x40000000000803, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f0000023f88)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20011000], 0x0, &(0x7f0000675ff0), &(0x7f0000000ca0)=[{0x0, '\x00', 0x1}, {0x0, '\x00', 0x3}, {0x0, '\x00', 0x4}]}, 0x108) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc_llcp={0x27, 0x9, 0x0, 0x0, 0x0, 0x0, "f0aeec0d840130e5c5485e44a7627f9a8864abed4d4460dd5b1a0182c6c84a143e64f31d1c11349c949054860b9c131950a610e2736612827582530c3c1df9"}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000200)="d7fb059c023ba6995de4e1c3663f16f206632f26d15714c1e1ccdb4943b59ca894d3ada3abfdae87efe3e7c77472b9c4e60b43ef4dc543d04834606a38856c48d49557e21d531e87b207f138310559fa596120d9e1d6aa88548627fd1f6ba2900f48fc75f50c641703", 0x69}, {&(0x7f00000003c0)="f5d1547a6dc8cc3d6da52541dc37be7038c9a16aadd723a235c74dfa7a414fe54aac44b7a845a21e9646c0b00e8bb083db5a8026168f8d893f3613157ba5c3a7f6c25ae7e578bc20946cc45a255dd72563670ec690bb68eff186525cdaef3728926414136db5cf8fe0c3c3a6bbaf4c407afcc04ccd80b2c9ed7f567f06bd476c3c84d68572426d9273e7f386baf444d047685f46c1bd40d25b25ccfcb7a902cdf111bf46c983aa4fef22724341ae9deffad3bdfd879a85f836835af2572e2595802e83b48f1ab19fdb385d8499b995ac646a38d331ffc55a85b04b594a47dabf52b17811da048ca6b7a22eadd7f5eafd6bed258e3652211ee007", 0xfa}], 0x2}, 0x0) 2018/04/13 21:58:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x7) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x20000000000002, r2, 0xe}) 2018/04/13 21:58:14 executing program 3: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@nat={"6e6174000000000000000000006affffff00", 0x1b, 0x5, 0x338, 0x0, 0x218, 0xffffffff, 0xc8, 0x218, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x398) 2018/04/13 21:58:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000180)={'erspan0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000140)}}) [ 652.745094] kvm: pic: level sensitive irq not supported [ 653.646413] kvm: pic: single mode not supported [ 653.651933] kvm: pic: level sensitive irq not supported [ 653.684978] kvm: pic: single mode not supported 2018/04/13 21:58:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/13 21:58:14 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) r3 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) write$evdev(r3, &(0x7f000023cfd0)=[{{}, 0x200002, 0x0, 0x403}, {}], 0x30) 2018/04/13 21:58:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000480)="0fc718f4f0861566b8a79212b40f23c00f21f8663501000a000f23f80f0f64a4aebaa100b078ee67650fae71006766c7442400540000006766c74424028db6f2026766c744240600000000670f011c2466b9cb0a000066b872e9000066ba000000000f306766c7442400427100006766c74424020e0000006766c744240600000000670f011c24", 0x87}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000008000000d97e3f7a66f5d8890000000000000000004000000000000000672b00e0ff00000096d700000000fffeffffffffffff0000000700000000000000080000000079ac1bc1de4e6ca101e843001a00ffffff7f000000000000000000000001011731b2b6864fb93cc13fe8692bddbcd39a42a5"]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/13 21:58:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:14 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f000010d000)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f000079df88)) msgsnd(r0, &(0x7f0000e74f60)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000be2f0a)={0x2}, 0x0, 0x0) msgrcv(r0, &(0x7f0000745000)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 2018/04/13 21:58:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)) 2018/04/13 21:58:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), 0x4) 2018/04/13 21:58:15 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffca6100000000000000004300000003"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/13 21:58:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/13 21:58:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) ftruncate(r1, 0x40001) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000340)=""/246) close(r2) sendfile(r0, r1, &(0x7f000000a000), 0xedee) 2018/04/13 21:58:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc004, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) 2018/04/13 21:58:15 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000400044002, 0x0) setresuid(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) sendfile(r0, r0, &(0x7f00000000c0), 0x800000007) 2018/04/13 21:58:15 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x10000000002717, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/13 21:58:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) [ 653.690586] kvm: pic: level sensitive irq not supported [ 654.706349] kvm: pic: single mode not supported [ 654.712054] kvm: pic: level sensitive irq not supported [ 654.728537] kvm: pic: single mode not supported 2018/04/13 21:58:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc004, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) 2018/04/13 21:58:16 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000400044002, 0x0) setresuid(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) sendfile(r0, r0, &(0x7f00000000c0), 0x800000007) 2018/04/13 21:58:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000480)="0fc718f4f0861566b8a79212b40f23c00f21f8663501000a000f23f80f0f64a4aebaa100b078ee67650fae71006766c7442400540000006766c74424028db6f2026766c744240600000000670f011c2466b9cb0a000066b872e9000066ba000000000f306766c7442400427100006766c74424020e0000006766c744240600000000670f011c24", 0x87}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000008000000d97e3f7a66f5d8890000000000000000004000000000000000672b00e0ff00000096d700000000fffeffffffffffff0000000700000000000000080000000079ac1bc1de4e6ca101e843001a00ffffff7f000000000000000000000001011731b2b6864fb93cc13fe8692bddbcd39a42a5"]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000638edf), 0x0, 0xfffffefffffffffe, &(0x7f0000fd6fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/04/13 21:58:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) 2018/04/13 21:58:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/231}, 0x18) 2018/04/13 21:58:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80}}, 0x14) 2018/04/13 21:58:16 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x10000000002717, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/13 21:58:16 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) 2018/04/13 21:58:16 executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@setlink={0x44, 0x13, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MAP={0x24, 0xe}]}, 0x44}, 0x1}, 0x0) 2018/04/13 21:58:16 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000400044002, 0x0) setresuid(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) sendfile(r0, r0, &(0x7f00000000c0), 0x800000007) 2018/04/13 21:58:16 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000021fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) 2018/04/13 21:58:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40087602, &(0x7f00000011c0)) 2018/04/13 21:58:16 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x10000000002717, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/13 21:58:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc004, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) 2018/04/13 21:58:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/231}, 0x18) [ 654.734051] kvm: pic: level sensitive irq not supported [ 655.968156] kvm: pic: single mode not supported [ 655.973784] kvm: pic: level sensitive irq not supported [ 656.028919] kvm: pic: single mode not supported 2018/04/13 21:58:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40087602, &(0x7f00000011c0)) 2018/04/13 21:58:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfffffffffffffffe) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000483ffc)=0x1, 0x4) r2 = memfd_create(&(0x7f0000000ffe)='$\x00', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = accept4(r1, &(0x7f00003ad000)=ANY=[], &(0x7f00008f1ffc), 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000200)=""/106, &(0x7f0000000140)=0x20) 2018/04/13 21:58:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000b56ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x3) r1 = accept(r0, 0x0, &(0x7f000069f000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) 2018/04/13 21:58:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc004, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) 2018/04/13 21:58:16 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000400044002, 0x0) setresuid(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) sendfile(r0, r0, &(0x7f00000000c0), 0x800000007) 2018/04/13 21:58:16 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x88) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e20, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x10000}}, [0x7, 0x4, 0x9bb9, 0xff, 0xfffffffffffffc00, 0x9d6, 0x8, 0xffffffff, 0x3, 0x8a, 0x2, 0x1, 0x80, 0x1, 0x9]}, &(0x7f0000000540)=0x100) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="080027bd7000ffdbdf2503000000080001005e00000800020002000080080003070000000000"], 0x2}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe2(&(0x7f000012d000)={0x0, 0x0}, 0x0) fremovexattr(r3, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') fchmod(r3, 0x40) execveat(r2, &(0x7f0000005000)='./file0\x00', &(0x7f0000005fd8)=[&(0x7f0000005000)='\x00'], &(0x7f0000005000), 0x1000) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) 2018/04/13 21:58:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/231}, 0x18) 2018/04/13 21:58:16 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x10000000002717, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/13 21:58:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40087602, &(0x7f00000011c0)) 2018/04/13 21:58:17 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000) 2018/04/13 21:58:17 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xc}}) 2018/04/13 21:58:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40087602, &(0x7f00000011c0)) 2018/04/13 21:58:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/anycast6\x00') sendfile(r0, r0, &(0x7f0000000400)=0x20020000, 0x9) 2018/04/13 21:58:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/231}, 0x18) 2018/04/13 21:58:17 executing program 5: mq_open(&(0x7f0000076000)='.\x00', 0x0, 0x0, &(0x7f0000521fc0)) 2018/04/13 21:58:17 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="080000000028000015"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) semget$private(0x0, 0x1, 0x102) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/13 21:58:17 executing program 2: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000516000)) socket$nl_route(0x10, 0x3, 0x0) 2018/04/13 21:58:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c74657200ebb6b6ca4a15fa297a41c03d8a0000000000000000000000000000000000000000000000000007000000040000005804000030020000180100001801000070"], 0x1) 2018/04/13 21:58:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f00003c4ff0)={&(0x7f00002a0e50)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 21:58:17 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r0) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) capset(&(0x7f0000da9ff8)={0x19980330}, &(0x7f0000001fe8)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000380)) 2018/04/13 21:58:17 executing program 1: msgrcv(0x0, &(0x7f0000000080)={0x0, ""/93}, 0x65, 0x0, 0x0) 2018/04/13 21:58:17 executing program 5: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x10, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = msgget(0x3, 0x28) lstat(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000340)={0x4, 0xc7, 0x8000, 0x2, 0x3f, 0x0, 0x6, 0x6, 0x6, 0x9}) r4 = geteuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0xff, r2, r3, r4, r5, 0x20, 0x4}, 0x2, 0x100000001, 0x2, 0x401, 0x10000, 0x7a5, r6, r7}) 2018/04/13 21:58:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/13 21:58:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$nl_netfilter(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c4"], 0x1}, 0x1}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/13 21:58:17 executing program 7: r0 = socket$inet(0x2, 0x100000000805, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000), 0x0) 2018/04/13 21:58:17 executing program 7: prctl$intptr(0x29, 0xffffffffffff0000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000005ff0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f0000eff000), 0x0, &(0x7f0000000000)}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 21:58:17 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) shmget(0x1, 0x4000, 0x54000040, &(0x7f0000ffa000/0x4000)=nil) fcntl$getownex(r0, 0x10, &(0x7f0000001780)) lseek(r0, 0x0, 0x4) 2018/04/13 21:58:17 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00001a8ffc)='\x00\x00\x00\x00', 0x4) 2018/04/13 21:58:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x8001}, 0x10) bind(r0, &(0x7f0000d01ff0)=@nfc={0x27}, 0x0) close(r0) [ 656.034454] kvm: pic: level sensitive irq not supported [ 658.176219] device lo left promiscuous mode [ 658.219630] device lo entered promiscuous mode 2018/04/13 21:58:18 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x48}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) 2018/04/13 21:58:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000faaffc)) 2018/04/13 21:58:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x1) 2018/04/13 21:58:18 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/13 21:58:18 executing program 6: mbind(&(0x7f0000b65000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x400, 0x0) setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 21:58:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000982f5b)={@random="0352ba8e8227", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x4000000000000320, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @dev={0xac, 0x14}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2099e9", 0x0, "d085f5"}}}}}}, &(0x7f000004d000)) pipe2(&(0x7f0000000140), 0x80000) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0x0, &(0x7f00002bd000/0x1000)=nil, 0x0) 2018/04/13 21:58:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/13 21:58:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x48}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) 2018/04/13 21:58:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x48}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) 2018/04/13 21:58:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$ipx(r0, 0x0, &(0x7f0000242000), 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') 2018/04/13 21:58:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="0fc76a03f30fbd08670fba22e1ff412dba2000b07eee66b890d700000f23c00f21f8663502000f000f23f80f01d5670f4485000000000f01ca66b9d508000066b8f0ffff7f66ba000000000f30"}], 0x1, 0xffffffffffffffff, &(0x7f0000000080), 0x100000000000031c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b345"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:19 executing program 2: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000180), 0x8, 0x0) 2018/04/13 21:58:19 executing program 6: mbind(&(0x7f0000b65000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x400, 0x0) setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 21:58:19 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xb, &(0x7f0000003ffc)=""/4, &(0x7f0000000000)=0x1) 2018/04/13 21:58:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x48}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) [ 658.943406] print_req_error: I/O error, dev loop0, sector 0 2018/04/13 21:58:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/13 21:58:20 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xb, &(0x7f0000003ffc)=""/4, &(0x7f0000000000)=0x1) 2018/04/13 21:58:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r3, &(0x7f00000001c0)="cb985a0f452679f5338d2a176de9f7ef9bae6a91e6a9919d4cc49f899550247ffbf4b128a3846923aee20b6a71dd1b0c634725726ea9f0566f6f9c1ba189ca7428f268555204d48a91e749ed1fe886acba5092e2ee33f61ec67ac3f0a6efd46561ff1dc49c6bf1114e7a334318ecc744383877dc6dab438c4b6e247cd68751869275d3f9b59cb20e0543486b3cc55f941b45eef65055c1d219286ee9d78ea6af9679629cd69c2590d734ec48da7fb7fbff9127a6c50bb54c5a3bdef34ab490679413f49ee1694102e6aaa37bf9e49c63604eff2d878dea3a8504ba54294830fa9367e1f92de20504f504147826c7d9dc", 0xf0, 0x51, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r5, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740)}}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x14) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001380)={&(0x7f0000000a00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/131, 0x83}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/149, 0x95}, {&(0x7f00000010c0)=""/199, 0xc7}], 0x9, &(0x7f0000001280)=""/226, 0xe2, 0x1}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001400)=0x14) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x3, 0x10, [], 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/16}, &(0x7f0000000500)=0x78) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', r6}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000902000000000000000000000000"], 0x1}, 0x1}, 0x0) gettid() setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000380)={0x0, 0x0, @multicast2}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') socket(0x3, 0x0, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 2018/04/13 21:58:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:20 executing program 6: mbind(&(0x7f0000b65000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x400, 0x0) setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 21:58:20 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x101f7fffd) sendfile(r0, r1, 0x0, 0x2) 2018/04/13 21:58:20 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) 2018/04/13 21:58:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/04/13 21:58:20 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xb, &(0x7f0000003ffc)=""/4, &(0x7f0000000000)=0x1) 2018/04/13 21:58:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/04/13 21:58:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f00000000c0)={0x18, 0x55, 0x3ff, 0x0, 0x0, {0x7}}, 0x358}, 0x1}, 0x0) 2018/04/13 21:58:20 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xb, &(0x7f0000003ffc)=""/4, &(0x7f0000000000)=0x1) 2018/04/13 21:58:20 executing program 6: mbind(&(0x7f0000b65000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x400, 0x0) setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 21:58:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/04/13 21:58:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 660.093069] PF_BRIDGE: br_mdb_parse() with invalid ifindex 2018/04/13 21:58:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/13 21:58:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x27, 0x331, 0x0, 0x0, {0x13}}, 0x14}, 0x1}, 0x0) 2018/04/13 21:58:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00009b6ff9)='ns/ipc\x00') setns(r0, 0x8000000) 2018/04/13 21:58:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r3, &(0x7f00000001c0)="cb985a0f452679f5338d2a176de9f7ef9bae6a91e6a9919d4cc49f899550247ffbf4b128a3846923aee20b6a71dd1b0c634725726ea9f0566f6f9c1ba189ca7428f268555204d48a91e749ed1fe886acba5092e2ee33f61ec67ac3f0a6efd46561ff1dc49c6bf1114e7a334318ecc744383877dc6dab438c4b6e247cd68751869275d3f9b59cb20e0543486b3cc55f941b45eef65055c1d219286ee9d78ea6af9679629cd69c2590d734ec48da7fb7fbff9127a6c50bb54c5a3bdef34ab490679413f49ee1694102e6aaa37bf9e49c63604eff2d878dea3a8504ba54294830fa9367e1f92de20504f504147826c7d9dc", 0xf0, 0x51, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r5, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740)}}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x14) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001380)={&(0x7f0000000a00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/131, 0x83}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/149, 0x95}, {&(0x7f00000010c0)=""/199, 0xc7}], 0x9, &(0x7f0000001280)=""/226, 0xe2, 0x1}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001400)=0x14) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x3, 0x10, [], 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/16}, &(0x7f0000000500)=0x78) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', r6}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000902000000000000000000000000"], 0x1}, 0x1}, 0x0) gettid() setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000380)={0x0, 0x0, @multicast2}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') socket(0x3, 0x0, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 2018/04/13 21:58:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 660.291067] print_req_error: I/O error, dev loop0, sector 0 2018/04/13 21:58:20 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000a2ffc)=0x2, 0x4) dup2(r1, r0) 2018/04/13 21:58:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendto$ipx(r2, &(0x7f0000000000)='^', 0x1, 0x0, 0x0, 0x0) 2018/04/13 21:58:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:20 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0xfa8, 0x4e81dfb3411080ca) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="93", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[], 0xfffffe38) shutdown(r0, 0x1) 2018/04/13 21:58:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r3, &(0x7f00000001c0)="cb985a0f452679f5338d2a176de9f7ef9bae6a91e6a9919d4cc49f899550247ffbf4b128a3846923aee20b6a71dd1b0c634725726ea9f0566f6f9c1ba189ca7428f268555204d48a91e749ed1fe886acba5092e2ee33f61ec67ac3f0a6efd46561ff1dc49c6bf1114e7a334318ecc744383877dc6dab438c4b6e247cd68751869275d3f9b59cb20e0543486b3cc55f941b45eef65055c1d219286ee9d78ea6af9679629cd69c2590d734ec48da7fb7fbff9127a6c50bb54c5a3bdef34ab490679413f49ee1694102e6aaa37bf9e49c63604eff2d878dea3a8504ba54294830fa9367e1f92de20504f504147826c7d9dc", 0xf0, 0x51, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r5, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740)}}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x14) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001380)={&(0x7f0000000a00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/131, 0x83}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/149, 0x95}, {&(0x7f00000010c0)=""/199, 0xc7}], 0x9, &(0x7f0000001280)=""/226, 0xe2, 0x1}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001400)=0x14) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x3, 0x10, [], 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/16}, &(0x7f0000000500)=0x78) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', r6}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000902000000000000000000000000"], 0x1}, 0x1}, 0x0) gettid() setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000380)={0x0, 0x0, @multicast2}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') socket(0x3, 0x0, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 2018/04/13 21:58:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 2018/04/13 21:58:21 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x34, 0x100001) write$evdev(r0, &(0x7f0000000100), 0x0) 2018/04/13 21:58:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') sendfile(r1, r0, &(0x7f0000000000)=0xf, 0x109) 2018/04/13 21:58:21 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000002540)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0x2c}, 0x1}, 0x0) 2018/04/13 21:58:21 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) 2018/04/13 21:58:21 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) 2018/04/13 21:58:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/13 21:58:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendto$ipx(r2, &(0x7f0000000000)='^', 0x1, 0x0, 0x0, 0x0) 2018/04/13 21:58:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r3, &(0x7f00000001c0)="cb985a0f452679f5338d2a176de9f7ef9bae6a91e6a9919d4cc49f899550247ffbf4b128a3846923aee20b6a71dd1b0c634725726ea9f0566f6f9c1ba189ca7428f268555204d48a91e749ed1fe886acba5092e2ee33f61ec67ac3f0a6efd46561ff1dc49c6bf1114e7a334318ecc744383877dc6dab438c4b6e247cd68751869275d3f9b59cb20e0543486b3cc55f941b45eef65055c1d219286ee9d78ea6af9679629cd69c2590d734ec48da7fb7fbff9127a6c50bb54c5a3bdef34ab490679413f49ee1694102e6aaa37bf9e49c63604eff2d878dea3a8504ba54294830fa9367e1f92de20504f504147826c7d9dc", 0xf0, 0x51, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r5, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740)}}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x14) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001380)={&(0x7f0000000a00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/131, 0x83}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/149, 0x95}, {&(0x7f00000010c0)=""/199, 0xc7}], 0x9, &(0x7f0000001280)=""/226, 0xe2, 0x1}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001400)=0x14) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x3, 0x10, [], 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/16}, &(0x7f0000000500)=0x78) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', r6}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000902000000000000000000000000"], 0x1}, 0x1}, 0x0) gettid() setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000380)={0x0, 0x0, @multicast2}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') socket(0x3, 0x0, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 2018/04/13 21:58:21 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) 2018/04/13 21:58:21 executing program 6: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) [ 661.026463] print_req_error: I/O error, dev loop0, sector 0 2018/04/13 21:58:21 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000540)) 2018/04/13 21:58:21 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) 2018/04/13 21:58:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendto$ipx(r2, &(0x7f0000000000)='^', 0x1, 0x0, 0x0, 0x0) 2018/04/13 21:58:21 executing program 6: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) 2018/04/13 21:58:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:21 executing program 1: clone(0x6, &(0x7f0000000600), &(0x7f0000476ffc), &(0x7f0000000040), &(0x7f000043dffe)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000637ff8)={0xeb}, 0x8, 0x0) read(r0, &(0x7f0000000100)=""/128, 0x3f7) 2018/04/13 21:58:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0x0, &(0x7f000000b000)={&(0x7f0000011fac)=@bridge_delneigh={0x1c, 0x1d, 0x329, 0x0, 0x0, {0x7}}, 0x206}, 0x1}, 0x0) 2018/04/13 21:58:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r0) 2018/04/13 21:58:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendto$ipx(r2, &(0x7f0000000000)='^', 0x1, 0x0, 0x0, 0x0) 2018/04/13 21:58:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x204}]}) 2018/04/13 21:58:21 executing program 6: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001240)="11", 0x1}], 0x1) 2018/04/13 21:58:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000007100004000000035e5cd28"]) 2018/04/13 21:58:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-generic,poly1305)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="6ad64a6eab0cc54ec21b3a933b7680fdbf", 0x11}], 0x1, &(0x7f0000655000)}, 0x0) recvmsg(r1, &(0x7f00000a6000)={&(0x7f0000074000)=@alg, 0x80, &(0x7f0000eecfc0)=[{&(0x7f000065efd2)=""/46, 0x2e}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/04/13 21:58:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0xfffffffffffffeb0) 2018/04/13 21:58:22 executing program 7: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3a, &(0x7f00004b3000), 0x0) 2018/04/13 21:58:22 executing program 6: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 2018/04/13 21:58:22 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/4081}, 0xff9, 0x0, 0x5243970b5a5d5f56) 2018/04/13 21:58:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:22 executing program 7: keyctl$dh_compute(0x17, &(0x7f0000000100), &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={"726d643235362d67656e65726963c14d28361982a29600"}}) 2018/04/13 21:58:22 executing program 6: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004ed000/0x3000)=nil, 0x3000, 0x11) 2018/04/13 21:58:22 executing program 5: perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x78, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x5, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x2, @loopback=0x7f000001}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="c81c202530d57db5faa0bafb94a7a20a989179686dc5a768fb065fe3ed951004068b95d0ae05c2f761168a5a541331cbc3ebaf9e40519494697062b29014cb7f9b229e4ab3d1721e5218b6cfbdc318e4aa72fae242815dd3478639e39eef1bf20bbe6fc20993af18a1a47ac7eaeb12d2259e272912dd3af20f5f66614688a5e7873627cdd1614dd90d1ba649305a584e0bbe9537e851abe610b46444c4961f9b561257e34d183f358916dcf9d2f0c2ff504ed0187c9d5574c5edef20", 0xbc}], 0x1, &(0x7f0000000500), 0x0, 0x40}, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)="6370752630000006fdfeff003c12b8d0cc69bf7fffcc364d7878b2fe44897367ffa75134df22ad89c89b0df602d72272e82ad32838002955c2db00000000000000050fb902ae9f2109333b00e30335ecfd7e89bff18829cb97541bd006bf3dcf376e93a15906083ba783fa3e7318893c26819bee569f728184be5efc06cc650d421908182b69c3730e559e2b6ca237f264987ed574e36cd3efd745ead1044fd7e82f7f65b71c79a10e2e605929cf8ccab2eadac54d1c3e7dae98996be67c10d7c236cde0355ab2fb0aaaaccdb64cd11d4db1b927234daae71562f2c40fa04b9aa17664350a37eb52480895070000008a0fc021db95d80d9b") [ 661.777705] could not allocate digest TFM handle rmd256-genericÁM(6‚¢– 2018/04/13 21:58:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0xfffffffffffffeb0) 2018/04/13 21:58:22 executing program 6: mkdir(&(0x7f0000249ff8)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x6) poll(&(0x7f0000f59fc8)=[{r1}, {r0}], 0x2, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4)) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000fddff8)='./file0\x00') mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') [ 661.860339] could not allocate digest TFM handle rmd256-genericÁM(6‚¢– 2018/04/13 21:58:22 executing program 7: mprotect(&(0x7f000018c000/0x800000)=nil, 0x800000, 0x4) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000b1eff0)={0x0, 0x0, 0x1}) rt_sigtimedwait(&(0x7f00009a4000)={0xffffffffffff0001}, &(0x7f00005d8000), &(0x7f0000645000), 0x8) 2018/04/13 21:58:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) write(r0, &(0x7f00000002c0)="a5", 0x1) write(r0, &(0x7f000069efac)="e2", 0x1) r1 = dup(r0) write$eventfd(r1, &(0x7f0000000280), 0xff93) write$eventfd(r1, &(0x7f0000000bc0), 0x8) 2018/04/13 21:58:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000002123ceca, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000140)=""/225, 0xe1}], 0x2, 0x0) 2018/04/13 21:58:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0xfffffffffffffeb0) 2018/04/13 21:58:23 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 2018/04/13 21:58:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet_sctp(0x2, 0x4000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000005c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0404ed0001f0010103000080ea88000000000000000000003dd56ef37fffffffffffffff8796750442e486dd48702288e1be90f432263a18d37266f42945b52b14810c62010077593f3174d28e9cda877818ca13e355fbd341eb824923060b190c0d6e8329bc6d02fd0b2e66880375182e3f8c419fd3e347c1e73fdd3d173f5f804984fe7c877638b1f464b5f82677554d71c7841164ab5eafe8c37117f8d6c2aae8e89b931a13d1"], &(0x7f0000000840)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r4, 0x9, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000de2ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000614fec)=ANY=[@ANYBLOB="e00000027f000001000000000300000f7f000001"], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002100), 0x8c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socketpair$inet(0x2, 0x0, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket(0x20000000000a, 0xf, 0x6) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x101, {0x8, 0xee5, 0x5, 0x7fff, 0x8, 0x100000000}, 0x442, 0x401}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 21:58:23 executing program 6: r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="e8", 0x1}], 0x1) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000280), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000029385094fee230edfc0c6565643b799365195f1b76"], 0x1000) 2018/04/13 21:58:23 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/87, 0x57}], 0x1, &(0x7f00000001c0)=""/11, 0xb}, 0x0) 2018/04/13 21:58:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000002123ceca, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000140)=""/225, 0xe1}], 0x2, 0x0) 2018/04/13 21:58:23 executing program 2: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000f79000)=@ipv4_newroute={0x28, 0x18, 0x305, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:58:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f0000007000)) 2018/04/13 21:58:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0xfffffffffffffeb0) 2018/04/13 21:58:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000002123ceca, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000140)=""/225, 0xe1}], 0x2, 0x0) 2018/04/13 21:58:23 executing program 2: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000f79000)=@ipv4_newroute={0x28, 0x18, 0x305, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:58:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)='h', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, 0x20) writev(r0, &(0x7f0000001700)=[{&(0x7f0000002480)="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", 0x2b1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f0000002080)='~', 0x1}], 0x1) 2018/04/13 21:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000400)="26660f38381e3219660f759b00000f302e0f01cbf081a70c000800660ffc9608000f09ba2100ed0f352c78", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x2}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000002123ceca, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000140)=""/225, 0xe1}], 0x2, 0x0) 2018/04/13 21:58:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fe4)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@getlink={0x2c, 0x12, 0x315, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa}, @IFLA_LINKINFO={0x4, 0x12}]}, 0x2c}, 0x1}, 0x0) 2018/04/13 21:58:24 executing program 2: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000f79000)=@ipv4_newroute={0x28, 0x18, 0x305, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/13 21:58:24 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f000014a000)='/dev/usbmon#\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/13 21:58:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000001c0)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/04/13 21:58:24 executing program 1: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0xff) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000716000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000685000)=[{&(0x7f0000001480)="a75fdcf8382d87057501070000000000dc72564f955555cc153a58ac", 0x1c}], 0x1, &(0x7f0000000000)}, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x43, &(0x7f0000001000)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/13 21:58:24 executing program 6: futex(&(0x7f0000004ffc), 0x20000000082, 0x0, &(0x7f00003f4ff0)={0x0, 0x989680}, &(0x7f0000210000), 0x0) 2018/04/13 21:58:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000006c0)="66ba420066ed64470f01dfc461d55e2066baf80cb87580c485ef66bafc0cb00eee450f2201360f01dfc4027d319a09000000fac461f9f90d0d000000420fa43100", 0x41}], 0x1, 0x0, &(0x7f0000000740), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f0000000780)={0x0, ""/172}, 0xb4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/13 21:58:24 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r0, 0x10, 0x6, 0xd7a) 2018/04/13 21:58:24 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40042, 0x0) write$vnet(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000080)=""/4096, 0x1000, &(0x7f0000001080)=""/240, 0x1, 0x4}}, 0x68) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) [ 664.082140] kasan: CONFIG_KASAN_INLINE enabled [ 664.087150] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 664.094589] general protection fault: 0000 [#1] SMP KASAN [ 664.100127] Dumping ftrace buffer: [ 664.103666] (ftrace buffer empty) [ 664.107373] Modules linked in: [ 664.110576] CPU: 1 PID: 126 Comm: kworker/u4:3 Not tainted 4.16.0+ #1 [ 664.117162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.126534] Workqueue: writeback wb_workfn [ 664.130777] RIP: 0010:wb_workfn+0x195/0x1770 [ 664.135171] RSP: 0000:ffff8801d9b87270 EFLAGS: 00010206 [ 664.140531] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff814ce855 [ 664.147789] RDX: 000000000000000a RSI: ffffffff81c9363d RDI: 0000000000000050 [ 664.155045] RBP: ffff8801d9b87750 R08: ffff8801d9bc80c0 R09: ffffed003b6246c2 [ 664.162299] R10: ffffed003b6246c2 R11: ffff8801db123613 R12: 0000000000000001 [ 664.169556] R13: 1ffff1003b370f37 R14: ffff8801d9b87728 R15: ffff88019e900c18 [ 664.176817] FS: 0000000000000000(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 664.185027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.190891] CR2: 0000000000730000 CR3: 00000001af127000 CR4: 00000000001406e0 [ 664.198148] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 664.205401] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 664.212652] Call Trace: [ 664.215230] ? __lock_acquire+0x7f5/0x5140 [ 664.219459] ? inode_wait_for_writeback+0x40/0x40 [ 664.224289] ? debug_check_no_locks_freed+0x310/0x310 [ 664.229481] ? lock_downgrade+0x8e0/0x8e0 [ 664.233611] ? lock_downgrade+0x8e0/0x8e0 [ 664.237753] ? kasan_check_read+0x11/0x20 [ 664.241886] ? do_raw_spin_unlock+0x9e/0x2e0 [ 664.246279] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 664.250844] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 664.255409] ? rcu_read_lock+0x70/0x70 [ 664.259280] ? kthread_data+0x58/0xc0 [ 664.263079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.268603] ? trace_hardirqs_off+0xd/0x10 [ 664.272837] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 664.277927] ? try_to_wake_up+0x102/0x1190 [ 664.282145] ? find_held_lock+0x36/0x1c0 [ 664.286192] ? graph_lock+0x170/0x170 [ 664.289982] ? migrate_swap_stop+0x850/0x850 [ 664.294377] ? lock_downgrade+0x8e0/0x8e0 [ 664.298514] ? find_held_lock+0x36/0x1c0 [ 664.302559] ? graph_lock+0x170/0x170 [ 664.306344] ? lock_acquire+0x1dc/0x520 [ 664.310304] ? process_one_work+0xb46/0x1b50 [ 664.314699] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 664.319791] ? __lock_is_held+0xb5/0x140 [ 664.323865] process_one_work+0xc1e/0x1b50 [ 664.328087] ? finish_task_switch+0x28b/0x810 [ 664.332575] ? pwq_dec_nr_in_flight+0x490/0x490 [ 664.337235] ? __schedule+0x809/0x1e30 [ 664.341113] ? retint_kernel+0x10/0x10 [ 664.344986] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 664.349988] ? graph_lock+0x170/0x170 [ 664.353779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 664.358610] ? find_held_lock+0x36/0x1c0 [ 664.362657] ? lock_acquire+0x1dc/0x520 [ 664.366614] ? worker_thread+0x41f/0x1440 [ 664.370748] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.376268] ? move_linked_works+0x2f6/0x470 [ 664.380665] ? trace_event_raw_event_workqueue_execute_start+0x290/0x290 [ 664.387490] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 664.392066] worker_thread+0xa30/0x1440 [ 664.396038] ? process_one_work+0x1b50/0x1b50 [ 664.400522] ? graph_lock+0x170/0x170 [ 664.404315] ? find_held_lock+0x36/0x1c0 [ 664.408373] ? __schedule+0x1e30/0x1e30 [ 664.412333] ? do_raw_spin_unlock+0x9e/0x2e0 [ 664.416726] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 664.421294] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 664.426392] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 664.431395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.436915] ? __kthread_parkme+0x1b7/0x280 [ 664.441224] kthread+0x345/0x410 [ 664.444579] ? process_one_work+0x1b50/0x1b50 [ 664.449059] ? kthread_bind+0x40/0x40 [ 664.452848] ret_from_fork+0x3a/0x50 [ 664.456548] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 ad 14 00 00 48 8b 9b 08 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 50 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 50 14 00 00 4c 8b 63 50 4d 85 e4 0f 84 d0 0e [ 664.475835] RIP: wb_workfn+0x195/0x1770 RSP: ffff8801d9b87270 [ 664.481864] ---[ end trace daeb354a457d913c ]--- [ 664.486646] Kernel panic - not syncing: Fatal exception [ 664.492467] Dumping ftrace buffer: [ 664.496009] (ftrace buffer empty) [ 664.499704] Kernel Offset: disabled [ 664.503309] Rebooting in 86400 seconds..